Edit tour

Windows Analysis Report
http://www.teachtravel.org/

Overview

General Information

Sample URL:	http://www.teachtravel.org/
Analysis ID:	1541360
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2240,i,13872071653682687369,18138941728541842946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6284 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.teachtravel.org/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49753 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.teachtravel.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=G76yMLgczP871mZ&MD=g5bbxdDm HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: teachtravel.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: teachtravel.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teachtravel.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/06/cropped-tt-32x32.png HTTP/1.1Host: teachtravel.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teachtravel.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/06/cropped-tt-32x32.png HTTP/1.1Host: teachtravel.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=G76yMLgczP871mZ&MD=g5bbxdDm HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.teachtravel.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: teachtravel.org

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49753 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/3@12/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2240,i,13872071653682687369,18138941728541842946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.teachtravel.org/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2240,i,13872071653682687369,18138941728541842946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
teachtravel.org	205.174.25.210	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
www.teachtravel.org	188.114.96.3	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://teachtravel.org/	false	unknown
https://teachtravel.org/wp-content/uploads/2022/06/cropped-tt-32x32.png	false	unknown
https://teachtravel.org/favicon.ico	false	unknown
https://www.teachtravel.org/	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	www.teachtravel.org	European Union	13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
205.174.25.210	teachtravel.org	United States	32244	LIQUIDWEBUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541360
Start date and time:	2024-10-24 18:17:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.teachtravel.org/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/3@12/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 216.58.206.78, 64.233.167.84, 34.104.35.123, 2.16.100.168, 88.221.110.91, 13.85.23.206, 192.229.221.95, 199.232.214.172, 40.69.42.241, 142.250.185.227
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.teachtravel.org/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1249
Entropy (8bit):	7.777512432648853
Encrypted:	false
SSDEEP:	24:IkuLtENbTi3N31xJ34zK9IrsJ80xsQYulJUR1ZPCet5yqwxl5onbLRX7iYRc:IkuaVkNFP34zK9I0eQYu/URXzyqw9oZ0
MD5:	C598B621B6ABFF8430318ED76B953F1A
SHA1:	CC1C350467682D60B1855CF6F641FC2DD6A1B80E
SHA-256:	18AD721FA5CC56847DD133000A8444B060B31E0FA6EA61ADD70325E253C7D9DD
SHA-512:	3A829EBE021E474D0E8F18FFFCFE2458ED96686F03C04AC198F6E232ACA55F9D2A5C3079B4739EB50D722E9A75354E5BB19C8BD61E816C4623DCE1847F230406
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX..kl.U......vw[.@.Q.T..Q4$.D.$..h .H...)...+Q....QDJ$.....5....S#.-..@!...t)Kw....~.....-D..s.../s.....)..Z.Y.C.!s8.j.l..T....J..I....k...I...B.....!..+pL.J"....K....<O...... .\...R..1..>...-N.6SJqS......A.C..Q2b.......V....i..R.........V....(..}.nn.c......g.=.OE{.N.R}. .1...~......fOv..?$>.....x...r..Qb..GP....6.ug....T...oK\...n..h.8....e...8r...pM..Q.\|zR.....[2v.o.Bxi....YO..{..]..pU5.7O..~...;....ZA..v;d.G.I..0kZ.:......4...N....#...#`.M....qp.m...m.#Sr..k...0w..K./O.s.:&Ap..mgW.]..!....pd.....^HO..y..G;..&.e<c...o...k...}.R..LDd..F.q.....X..Z..m.7..)'M..K+k....N...L.O......c....)...W#u............8(.s9l....m.xD..#]JZ\.5..ZKj......]...g9..N.7... ....-_.... ...Z.l{..,....T.Qy.(.....6....5..._rx.l.....q......,.&w....^..ykc.l.P..u.......s...z.....+t..h...{-..#.Y}.5...K).....l\9[...l....{...../!.......!48G..w.3..8]...+..4]s.3...`Z7}C.$&....].xe.....I....O?......mh8.np..kr.O]...p.4.o..B.@.2f..#..

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	7.777512432648853
Encrypted:	false
SSDEEP:	24:IkuLtENbTi3N31xJ34zK9IrsJ80xsQYulJUR1ZPCet5yqwxl5onbLRX7iYRc:IkuaVkNFP34zK9I0eQYu/URXzyqw9oZ0
MD5:	C598B621B6ABFF8430318ED76B953F1A
SHA1:	CC1C350467682D60B1855CF6F641FC2DD6A1B80E
SHA-256:	18AD721FA5CC56847DD133000A8444B060B31E0FA6EA61ADD70325E253C7D9DD
SHA-512:	3A829EBE021E474D0E8F18FFFCFE2458ED96686F03C04AC198F6E232ACA55F9D2A5C3079B4739EB50D722E9A75354E5BB19C8BD61E816C4623DCE1847F230406
Malicious:	false
Reputation:	low
URL:	https://teachtravel.org/wp-content/uploads/2022/06/cropped-tt-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATX..kl.U......vw[.@.Q.T..Q4$.D.$..h .H...)...+Q....QDJ$.....5....S#.-..@!...t)Kw....~.....-D..s.../s.....)..Z.Y.C.!s8.j.l..T....J..I....k...I...B.....!..+pL.J"....K....<O...... .\...R..1..>...-N.6SJqS......A.C..Q2b.......V....i..R.........V....(..}.nn.c......g.=.OE{.N.R}. .1...~......fOv..?$>.....x...r..Qb..GP....6.ug....T...oK\...n..h.8....e...8r...pM..Q.\|zR.....[2v.o.Bxi....YO..{..]..pU5.7O..~...;....ZA..v;d.G.I..0kZ.:......4...N....#...#`.M....qp.m...m.#Sr..k...0w..K./O.s.:&Ap..mgW.]..!....pd.....^HO..y..G;..&.e<c...o...k...}.R..LDd..F.q.....X..Z..m.7..)'M..K+k....N...L.O......c....)...W#u............8(.s9l....m.xD..#]JZ\.5..ZKj......]...g9..N.7... ....-_.... ...Z.l{..,....T.Qy.(.....6....5..._rx.l.....q......,.&w....^..ykc.l.P..u.......s...z.....+t..h...{-..#.Y}.5...K).....l\9[...l....{...../!.......!48G..w.3..8]...+..4]s.3...`Z7}C.$&....].xe.....I....O?......mh8.np..kr.O]...p.4.o..B.@.2f..#..

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 18:18:28.817198038 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 18:18:38.426572084 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 18:18:40.176143885 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.176187992 CEST	443	49735	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:40.176250935 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.176561117 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.176575899 CEST	443	49735	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:40.820290089 CEST	443	49735	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:40.820604086 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.820620060 CEST	443	49735	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:40.821615934 CEST	443	49735	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:40.821794987 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.822707891 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.822736025 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.822777033 CEST	443	49735	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:40.822810888 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.822839975 CEST	49735	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.823172092 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.823210955 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:40.823278904 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.823504925 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:40.823518991 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:41.450969934 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:41.482841015 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:41.482853889 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:41.483983994 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:41.484153986 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:41.486797094 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:41.486860037 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:41.487168074 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:41.487174988 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:41.538800001 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:42.435453892 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:42.435496092 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:42.435791016 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:42.435791016 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:42.435825109 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:43.292859077 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:43.293195963 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:43.293221951 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:43.294275999 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:43.294549942 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:43.295398951 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:43.295459032 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:43.348916054 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:43.348925114 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:43.396672964 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:43.789863110 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:43.789916992 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:43.789988041 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:43.791481018 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:43.791502953 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.649776936 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.649857998 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.653724909 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.653747082 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.654161930 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.696367025 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.743340015 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.940378904 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.940532923 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.940634966 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.940680981 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.940696955 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.940696955 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.940707922 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.940716982 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.980063915 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.980112076 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:44.980205059 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.980556011 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:44.980576992 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:45.829159975 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:45.829292059 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:45.830590963 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:45.830610991 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:45.831617117 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:45.835562944 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:45.883330107 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:46.078054905 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:46.078222036 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:46.079027891 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:46.079118967 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:46.079118967 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:18:46.079137087 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:46.079144955 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:18:51.501718998 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:51.501782894 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:51.501884937 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:51.507349014 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:51.507392883 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:52.455116987 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:52.455218077 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:52.458386898 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:52.458421946 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:52.458863020 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:52.511548996 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.304220915 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:53.304302931 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:53.304794073 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:53.370647907 CEST	49739	443	192.168.2.4	142.250.186.132
Oct 24, 2024 18:18:53.370693922 CEST	443	49739	142.250.186.132	192.168.2.4
Oct 24, 2024 18:18:53.430470943 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.475339890 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740058899 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740087986 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740097046 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740147114 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740189075 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740209103 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740231037 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.740258932 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.740292072 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.740292072 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.740315914 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.740962029 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.741045952 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.741059065 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.747708082 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:53.747769117 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:53.775010109 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:53.786803961 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:53.786865950 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:53.787885904 CEST	49736	443	192.168.2.4	188.114.96.3
Oct 24, 2024 18:18:53.787905931 CEST	443	49736	188.114.96.3	192.168.2.4
Oct 24, 2024 18:18:53.924417019 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:18:53.924468040 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:18:53.924582005 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:18:53.924874067 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:18:53.924890995 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:18:54.666515112 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:18:54.672169924 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:18:54.672195911 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:18:54.673247099 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:18:54.673326969 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:18:54.674530029 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:54.674566031 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:54.674586058 CEST	49742	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:18:54.674593925 CEST	443	49742	52.149.20.212	192.168.2.4
Oct 24, 2024 18:18:54.682887077 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:18:54.682954073 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:18:54.683226109 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:18:54.683235884 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:18:54.731375933 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:01.955693960 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:01.955779076 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:01.955847025 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:01.957185030 CEST	49746	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:01.957207918 CEST	443	49746	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:02.243371964 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:02.243417025 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:02.243494034 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:02.243880033 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:02.243891954 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:02.972537041 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:02.994214058 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:02.994235992 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:02.994627953 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:02.999962091 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:03.000066042 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:03.000972986 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:03.047323942 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:06.330872059 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:06.331459045 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:06.331501961 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:06.331662893 CEST	443	49749	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:06.331702948 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:06.331742048 CEST	49749	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:06.333206892 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:06.333268881 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:06.333365917 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:06.333745956 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:06.333764076 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.026407003 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.026799917 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.026834965 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.028309107 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.028440952 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.028958082 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.029062986 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.029180050 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.029190063 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.081875086 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.208753109 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.208843946 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.211061954 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.211333990 CEST	49750	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.211358070 CEST	443	49750	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.243767023 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.243815899 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.244162083 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.244463921 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.244477034 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.938640118 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.939032078 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.939047098 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.940040112 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.940110922 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.940695047 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.940742970 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.941093922 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:07.941099882 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:07.987632990 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:08.109955072 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:08.110034943 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:08.110133886 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:08.110929966 CEST	49751	443	192.168.2.4	205.174.25.210
Oct 24, 2024 18:19:08.110944986 CEST	443	49751	205.174.25.210	192.168.2.4
Oct 24, 2024 18:19:29.089592934 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:29.089662075 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:29.089735031 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:29.090012074 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:29.090029001 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:29.845900059 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:29.846055984 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:29.854552984 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:29.854595900 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:29.855726004 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:29.874274015 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:29.915334940 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.150017023 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.150099039 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.150177956 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.150243998 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.150329113 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.267013073 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.267066002 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.267178059 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.267178059 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.267246008 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.267322063 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.383938074 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.384012938 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.384108067 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.384109020 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.384175062 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.384233952 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.501333952 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.501396894 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.501413107 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.501446962 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.501470089 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.501485109 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.618314981 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.618395090 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.618464947 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.618499994 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.618525028 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.621721983 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.734832048 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.734855890 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.735096931 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.735129118 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.735266924 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.794984102 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.795039892 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.795156956 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.795156956 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.795223951 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.795345068 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.853722095 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.853755951 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.853844881 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.853889942 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.853915930 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.853952885 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.970211983 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.970288038 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.970350027 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.970418930 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:30.970463037 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:30.973660946 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.086771011 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.086843967 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.086891890 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.086968899 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.087004900 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.087131977 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.203973055 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.204030037 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.204068899 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.204087019 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.204122066 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.204808950 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.265728951 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:31.265793085 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:31.266516924 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.266570091 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.266623974 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:31.266628027 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.266642094 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.266695976 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.266695976 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.267296076 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:31.267317057 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:31.321438074 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.321497917 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.321532011 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.321541071 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.321568012 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.321613073 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.384665012 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.384840012 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.384849072 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.384872913 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.384902000 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.384916067 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.384934902 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.384980917 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.384989977 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.425307989 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.425331116 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.425478935 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.426321030 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.426336050 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.427901983 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.427934885 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.427963972 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.428011894 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.428037882 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.428092957 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.428150892 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.428160906 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.429059029 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.429111958 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.429727077 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.429730892 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.429734945 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.429747105 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.429765940 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.429815054 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.429955006 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.429959059 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:31.429963112 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:31.429974079 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.166498899 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.167615891 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.167639971 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.168509007 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.168515921 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.187290907 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.188014984 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.188036919 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.189105034 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.189114094 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.195149899 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.195219994 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.195265055 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.195656061 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.196119070 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.196136951 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.197210073 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.197216034 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.199389935 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.200244904 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.200263023 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.200645924 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.200922012 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.200939894 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.201791048 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.201797009 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.208889961 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.208920956 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.209615946 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.209628105 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.221095085 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.263339996 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.299575090 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.300071955 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.300132036 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.300390005 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.300414085 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.300429106 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.300434113 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.305692911 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.305732965 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.305836916 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.306232929 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.306247950 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.324165106 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.324193954 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.324249029 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.324254036 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.324290037 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.324563026 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.324579000 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.324594975 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.324599028 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.329158068 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.329195976 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.329247952 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.329624891 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.329638958 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.331199884 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.331372023 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.331424952 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.331585884 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.331607103 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.336121082 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.336148977 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.336218119 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.336415052 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.336430073 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.337368965 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.337402105 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.337454081 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.337472916 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.337510109 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.337794065 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.337798119 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.337827921 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.337968111 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.338001966 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.338053942 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.342631102 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.342643023 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.342709064 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.343054056 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.343064070 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.424700022 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.424757004 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.424835920 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.424911022 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.424954891 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.424968958 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.424999952 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.425302982 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.425343037 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.425371885 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.425385952 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.453615904 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.453685999 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.453748941 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.454499006 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:32.454518080 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:32.525880098 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.525935888 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.525978088 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.526022911 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.526057959 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.526071072 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.526107073 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.644308090 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.644378901 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.644418001 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.644453049 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.644468069 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.644692898 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.644706011 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.644733906 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:32.645072937 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.645165920 CEST	443	49753	52.149.20.212	192.168.2.4
Oct 24, 2024 18:19:32.645279884 CEST	49753	443	192.168.2.4	52.149.20.212
Oct 24, 2024 18:19:33.064982891 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.067030907 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.067030907 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.067056894 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.067070961 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.086997032 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.087770939 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.087800980 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.087951899 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.089390993 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.089396954 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.089788914 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.089811087 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.090352058 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.090356112 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.095921040 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.096282959 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.096296072 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.096704960 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.096710920 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.202632904 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.202794075 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.203007936 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.203007936 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.203336954 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.203356981 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.205674887 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.205729008 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.205816031 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.205934048 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.205943108 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.224447012 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.224886894 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.224971056 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.224971056 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.225044012 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.225058079 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.227175951 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.227219105 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.227608919 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.227608919 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.227644920 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.233737946 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.233834028 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.233977079 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.233977079 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.234072924 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.234085083 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.234081984 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.234561920 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.234591961 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.235899925 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.235944986 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.235950947 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.236051083 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.236176968 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.236207962 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.236239910 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.236263037 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.236263037 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.236274004 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.236287117 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.236291885 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.236641884 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.236654997 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.238513947 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.238538027 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.238611937 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.238746881 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.238760948 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.372082949 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.372361898 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.372462034 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.372462034 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.372553110 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.372570992 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.374977112 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.375034094 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.375226021 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.375226021 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.375293970 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.976356983 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.976846933 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.976875067 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.977287054 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.977293015 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.985089064 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.985516071 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.985534906 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:33.985902071 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:33.985908031 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.000263929 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.000629902 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.000647068 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.001018047 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.001022100 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.016673088 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.016949892 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.016963005 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.017277956 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.017282009 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.115147114 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.115305901 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.115375042 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.115618944 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.115639925 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.115650892 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.115655899 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.118380070 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.118423939 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.118609905 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.118609905 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.118642092 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.121131897 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.121313095 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.121397972 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.121454954 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.121469021 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.121495008 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.121500969 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.123635054 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.123681068 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.123744965 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.123867035 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.123877048 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.154746056 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.154803991 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.154858112 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.155088902 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.155107021 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.155121088 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.155127048 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.157835960 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.157869101 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.157932997 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.158106089 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.158121109 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.161031961 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.161149979 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.161204100 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.161251068 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.161262035 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.161283016 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.161288977 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.163228989 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.163275957 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.163386106 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.163549900 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.163567066 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.164359093 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.164721966 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.164747953 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.165132046 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.165143967 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.302722931 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.302920103 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.302990913 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.303033113 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.303055048 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.303066969 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.303071976 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.305696964 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.305737972 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.305789948 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.305977106 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.305990934 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.899245024 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.899718046 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.899730921 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.900072098 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.900077105 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.914717913 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.915103912 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.915143013 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.915530920 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.915544033 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.921143055 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.921479940 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.921494007 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.921859026 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.921865940 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.930053949 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.930391073 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.930421114 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:34.930761099 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:34.930768013 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.036437035 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.036554098 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.036644936 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.036761045 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.036761045 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.036780119 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.036783934 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.039551973 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.039618015 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.039679050 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.039844036 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.039866924 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.050204039 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.050585032 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.050604105 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.051110983 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.051117897 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.059077978 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.059266090 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.059338093 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.059338093 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.059370041 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.059385061 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.061774969 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.061806917 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.061994076 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.061995029 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.062016010 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.066319942 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.066420078 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.066474915 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.066555977 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.066555977 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.066571951 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.066584110 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.068766117 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.068794966 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.068968058 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.069078922 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.069102049 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.073226929 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.073607922 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.073673010 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.073709965 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.073729038 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.073740005 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.073746920 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.075680017 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.075711966 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.075763941 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.075874090 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.075881958 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.185518026 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.185602903 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.185673952 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.185854912 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.185854912 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.185873985 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.185884953 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.188484907 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.188520908 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.188668013 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.188746929 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.188765049 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.799494028 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.799990892 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.800040960 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.800453901 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.800461054 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.807847977 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.808517933 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.808527946 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.808578014 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.808598042 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.816534042 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.817207098 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.817207098 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.817218065 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.817231894 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.834148884 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.835130930 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.835153103 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.835490942 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.835496902 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.936703920 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.937036037 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.937097073 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.937145948 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.937145948 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.937167883 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.937181950 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.939815998 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.939853907 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.940010071 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.940186024 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.940197945 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.941765070 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.941955090 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.942363977 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.942394018 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.942394018 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.942408085 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.942411900 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.944338083 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.944367886 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.944510937 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.945446968 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.945460081 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.951874971 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.952023029 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.952074051 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.952111959 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.952111959 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.952125072 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.952138901 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.953990936 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.954014063 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.954180002 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.954304934 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.954319954 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.957513094 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.957866907 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.957880020 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.958288908 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.958292007 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.970843077 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.971075058 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.971120119 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.971143007 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.971149921 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.971163988 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.971168995 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.973275900 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.973292112 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:35.973472118 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.973472118 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:35.973499060 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.097717047 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.097945929 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.098084927 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.098479986 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.098479986 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.098499060 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.098509073 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.101854086 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.101905107 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.101974010 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.102094889 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.102106094 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.766966105 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.767242908 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.767930984 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.767944098 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.767990112 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.768538952 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.768543959 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.769064903 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.769071102 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.769256115 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.769990921 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.769994974 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.770550013 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.770572901 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.770950079 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.770953894 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.771563053 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.771626949 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.772243023 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.772258997 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.877490997 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.899878025 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.899894953 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.901200056 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.901206970 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.904268026 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905081034 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905227900 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.905306101 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.905306101 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.905349970 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905404091 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905646086 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905656099 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905736923 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905786991 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.905817986 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.905857086 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.906775951 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.906781912 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.906795979 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.906800032 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.908567905 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.908572912 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.909913063 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.909984112 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.910028934 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.912787914 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.912796974 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.912820101 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.912826061 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.918327093 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.918359041 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.918425083 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.919207096 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.919220924 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.921443939 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.921468019 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.921550035 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.921679020 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.921691895 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.922804117 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.922816992 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.922952890 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.924350023 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.924360991 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.924410105 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.924726009 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.924738884 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:36.924906015 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:36.924916029 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.032253981 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.032522917 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.032583952 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.032792091 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.032812119 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.032828093 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.032835007 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.037870884 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.037919044 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.038012981 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.038156033 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.038167000 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.671591997 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.672324896 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.672357082 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.673466921 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.673474073 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.675420046 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.676662922 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.696382046 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.696399927 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.696780920 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.697329044 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.697335958 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.698004007 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.698015928 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.699419975 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.699425936 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.700962067 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.700978041 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.701934099 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.701940060 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.808918953 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.809425116 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.809494019 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.809721947 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.809743881 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.809757948 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.809766054 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.810373068 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.812926054 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.812952995 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.814140081 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.814147949 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.817737103 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.817771912 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.817826986 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.818178892 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.818190098 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.829253912 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.829406977 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.829561949 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.829797983 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.829816103 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.829832077 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.829838991 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.833693981 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.833729982 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.833791971 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.834186077 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.834201097 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.837236881 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.837311983 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.837626934 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.837637901 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.837686062 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.837702036 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.837768078 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.837780952 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.837810993 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.837816954 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.839571953 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.839580059 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.839593887 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.839600086 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.845596075 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.845617056 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.845686913 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.846935987 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.846944094 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.848201990 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.848222971 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.848294020 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.848546028 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.848556995 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.951538086 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.951628923 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.951689959 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.952135086 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.952152967 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.952166080 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.952171087 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.955799103 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.955882072 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:37.955959082 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.956248045 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:37.956279039 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.570580959 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.571026087 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.571047068 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.571444988 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.571449995 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.588946104 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.589282036 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.589306116 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.589735985 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.589741945 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.593723059 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.594048023 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.594065905 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.594379902 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.594386101 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.623050928 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.623476982 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.623486996 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.623892069 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.623895884 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.708061934 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.708216906 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.708302021 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.708429098 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.708441019 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.708452940 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.708456993 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.711136103 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.711216927 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.711302996 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.711441994 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.711469889 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.717369080 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.717735052 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.717775106 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.718097925 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.718115091 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.726703882 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.726840019 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.726898909 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.726964951 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.726979017 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.726989031 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.726994991 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.729239941 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.729259968 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.729319096 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.729458094 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.729471922 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.734309912 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.734885931 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.734983921 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.734985113 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.734985113 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.737113953 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.737127066 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.737409115 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.737598896 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.737610102 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.760680914 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.761301994 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.761365891 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.761415958 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.761426926 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.761436939 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.761440992 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.763519049 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.763547897 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.763706923 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.763832092 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.763835907 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.863010883 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.863168955 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.863230944 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.863450050 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.863468885 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.866220951 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.866245031 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:38.866313934 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.866662025 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:38.866676092 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.049936056 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.049998999 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.482781887 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.486556053 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.486635923 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.487116098 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.487133980 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.503523111 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.503967047 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.503973961 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.506203890 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.506207943 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.535259962 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.536317110 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.536339998 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.537601948 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.540520906 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.540551901 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.557960987 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.557972908 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.565021992 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.565030098 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.619883060 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.621237993 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.621334076 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.621377945 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.622546911 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.622558117 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.623853922 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.623857975 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.624214888 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.624228954 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.624275923 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.624281883 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.628354073 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.628386974 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.628438950 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.628632069 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.628644943 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.644975901 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.645129919 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.645176888 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.657506943 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.657524109 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.657536030 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.657541037 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.677381039 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.677421093 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.677515984 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.677866936 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.678071022 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.678270102 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.679723024 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.679739952 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.680007935 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.680026054 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.686113119 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.686163902 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.686229944 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.686578989 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.686599970 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.697949886 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.698095083 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.698179007 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.698374987 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.698381901 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.702429056 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.702513933 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.702595949 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.702941895 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.702975035 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.756822109 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.757006884 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.757085085 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.757123947 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.757144928 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.757158995 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.757165909 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.759809971 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.759855032 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:39.760013103 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.763341904 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:39.763355970 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.419828892 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.420320988 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.420345068 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.420799017 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.420804024 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.432329893 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.432653904 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.432682991 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.433017015 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.433022976 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.454782963 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.455117941 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.455140114 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.455507994 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.455518007 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.539284945 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.539793968 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.539815903 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.540288925 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.540302038 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.559146881 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.559478045 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.559540033 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.559576035 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.559598923 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.559616089 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.559623957 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.562352896 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.562444925 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.562542915 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.562683105 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.562714100 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.569792032 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.570163012 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.570224047 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.570265055 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.570281029 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.570313931 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.570322037 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.572654963 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.572694063 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.572830915 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.572909117 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.572917938 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.591558933 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.591676950 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.591728926 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.591794968 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.591804981 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.591820955 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.591825962 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.593745947 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.594080925 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.594110012 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.594228029 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.594254017 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.594314098 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.594435930 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.594444990 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.594715118 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.594722033 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.680058002 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.680284023 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.680342913 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.680466890 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.680490017 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.680505037 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.680510044 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.683037043 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.683082104 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.683171988 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.683342934 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.683361053 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.730308056 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.730566025 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.730614901 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.730657101 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.730678082 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.730690956 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.730699062 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.733269930 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.733298063 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:40.733356953 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.733481884 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:40.733494997 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.318753004 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.319462061 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.319492102 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.319937944 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.319943905 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.346524000 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.346710920 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.347217083 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.347229958 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.351353884 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.351358891 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.351358891 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.351358891 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.351387978 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.351397991 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.458300114 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.458897114 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.458930969 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.459362030 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.459372044 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.460479021 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.460557938 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.460606098 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.460767031 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.460779905 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.460796118 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.460802078 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.464457989 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.464492083 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.464577913 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.464699030 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.464718103 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.487073898 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.487128019 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.487209082 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.487262964 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.487380981 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.487396002 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.487406969 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.487411976 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.488116980 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.488172054 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.488184929 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.488188982 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.488199949 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.488203049 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.490850925 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.490878105 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.490931034 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.491003036 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.491019011 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.491064072 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.491179943 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.491189957 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.491262913 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.491274118 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.505770922 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.506261110 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.506275892 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.506644964 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.506649017 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.601377964 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.601625919 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.601696968 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.601736069 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.601754904 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.601771116 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.601778030 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.604487896 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.604513884 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.604670048 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.604811907 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.604825020 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.647478104 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.647634983 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.647715092 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.647749901 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.647762060 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.649879932 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.649916887 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:41.649976969 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.650094986 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:41.650108099 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.251396894 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.251890898 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.251916885 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.252336025 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.252341032 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.255171061 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.255283117 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.255633116 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.255655050 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.255690098 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.255722046 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.256131887 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.256139040 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.256372929 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.256378889 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.362992048 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.363512993 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.363529921 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.363898039 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.363903046 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.386003971 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.386167049 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.386503935 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.386652946 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.386652946 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.386698008 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.386729956 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.389250994 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.389285088 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.389511108 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.389852047 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.389868021 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.393901110 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.394038916 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.394051075 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.394126892 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.394273996 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.394341946 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.394663095 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.394663095 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.394673109 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.394682884 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.395735025 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.395761967 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.395790100 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.395803928 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.397937059 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.397994041 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.398086071 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.399106026 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.399175882 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.399225950 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.399256945 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.399275064 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.399383068 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.399403095 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.414752960 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.415277958 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.415394068 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.415667057 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.415685892 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.496887922 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:42.496941090 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:42.497132063 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:42.497350931 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:42.497359037 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:42.502458096 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.502736092 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.502825975 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.502996922 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.502996922 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.503010988 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.503020048 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.505623102 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.505645037 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.505798101 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.505990028 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.506000042 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.550149918 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.550234079 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.550327063 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.550502062 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.550520897 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.550533056 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.550539017 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.553196907 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.553231001 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:42.553292036 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.553457022 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:42.553466082 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.149547100 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.150012016 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.150043011 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.150523901 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.150531054 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.153021097 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.153342962 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.153362036 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.153718948 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.153727055 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.161428928 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.161880970 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.161919117 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.162242889 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.162260056 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.283509970 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.283669949 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.283741951 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.283843994 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.283869028 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.283881903 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.283889055 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.286915064 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.287158966 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.287198067 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.287300110 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.287647963 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.287688971 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.288149118 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.288161993 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.288326025 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.288341999 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.300405979 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.300580025 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.300642967 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.300769091 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.300769091 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.300801039 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.300808907 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.303595066 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.303615093 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.303767920 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.303908110 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.303917885 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.317478895 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.317811012 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.317817926 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.318208933 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.318212986 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.323283911 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.323446989 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.323535919 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.323590994 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.323605061 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.323617935 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.323623896 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.325548887 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.325561047 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.325611115 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.325742006 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.325753927 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.372138977 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:43.372467995 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:43.372503996 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:43.373610020 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:43.374228954 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:43.374304056 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:43.423948050 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.424144983 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.424213886 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.424547911 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.424547911 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.424582958 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.424607992 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.424921036 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:43.447494030 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.447529078 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.447602034 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.447890997 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.447907925 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.455702066 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.455845118 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.455915928 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.456363916 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.456374884 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.456387997 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.456392050 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.461771011 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.461798906 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:43.461867094 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.461997986 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:43.462006092 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.054548025 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.055155993 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.055188894 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.055948973 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.055955887 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.087999105 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.088521957 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.088540077 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.090066910 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.090071917 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.100383997 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.118179083 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.118206024 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.118597031 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.118602991 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.192708015 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.193152905 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.193308115 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.193355083 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.193355083 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.193370104 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.193377972 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.195776939 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.195811987 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.195885897 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.196012020 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.196022034 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.204371929 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.204813004 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.204828024 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.205272913 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.205280066 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.223571062 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.223906040 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.223920107 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.224307060 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.224313021 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.225305080 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.225483894 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.225534916 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.225593090 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.225593090 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.225600958 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.225608110 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.227422953 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.227449894 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.227503061 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.227623940 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.227633953 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.250087976 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.250298977 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.250356913 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.250396013 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.250396013 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.250410080 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.250418901 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.252221107 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.252268076 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.252343893 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.252507925 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.252537966 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.340873003 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.341439962 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.341501951 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.341532946 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.341548920 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.341562033 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.341568947 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.344011068 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.344053030 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.344155073 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.344319105 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.344335079 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.360328913 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.360476017 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.360533953 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.360567093 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.360584021 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.360596895 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.360603094 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.363162994 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.363248110 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:44.363327026 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.363470078 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:44.363503933 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.128735065 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.129177094 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.129417896 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.129446030 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.130362034 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.130377054 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.130800962 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.130839109 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.131620884 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.131839991 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.131853104 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.132611036 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.132631063 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.133430958 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.133440018 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.278275013 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.278373003 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.278506994 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.278516054 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.278568983 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.278573036 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.278714895 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.278873920 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.278894901 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.278907061 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.278913975 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.279417992 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.279546976 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.280375957 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.280395985 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.281589031 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.281610966 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.282110929 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.282852888 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.283298016 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.283319950 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.283970118 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.283974886 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.284379005 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.284393072 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.284950972 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.284955978 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.287087917 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.287117958 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.287324905 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.287440062 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.287448883 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.288532972 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.288594007 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.288687944 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.289550066 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.289582014 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.290576935 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.290644884 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.290817022 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.291064024 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.291090965 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.417881966 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.418064117 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.418114901 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.422791958 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.422969103 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.423077106 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.427001953 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.427038908 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.427088022 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.427103043 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.429019928 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.429039001 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.429054022 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.429059029 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.434072971 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.434161901 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.434259892 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.435092926 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.435127974 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.436517000 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.436574936 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:45.436645031 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.436887026 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:45.436919928 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.036613941 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.037117004 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.037132978 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.037507057 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.037513971 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.049860954 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.050144911 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.050374985 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.050436974 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.050770044 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.050776958 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.050784111 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.050822973 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.051244974 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.051261902 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.173316956 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.173345089 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.173432112 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.173448086 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.173758984 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.173837900 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.175810099 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.182358027 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.182358027 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.182379961 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.182388067 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.184767008 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.185349941 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.185400963 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.186436892 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.186456919 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.186615944 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.186760902 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.186820030 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.187156916 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.187171936 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.187710047 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.187724113 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.188040972 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.188064098 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.188352108 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.188421011 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.188472986 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.189048052 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.189080954 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.189110041 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.189126968 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.194063902 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.194099903 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.194210052 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.194369078 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.194375992 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.196541071 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.196574926 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.196858883 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.197922945 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.197936058 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.199052095 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.199074030 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.199151993 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.199323893 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.199332952 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.315623999 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.315660000 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.315726995 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.315730095 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.315767050 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.316010952 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.316039085 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.316056967 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.316065073 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.320266008 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.320322037 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.320394039 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.320761919 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.320779085 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.321716070 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.321768999 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.321851969 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.321877956 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.322119951 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.322168112 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.322381020 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.322392941 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.322417021 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.322422981 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.326095104 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.326138020 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.326241970 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.326606035 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.326625109 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.949563026 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.950464964 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.950532913 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.951201916 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.951256990 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.966689110 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.967390060 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.967453957 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.968372107 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.968386889 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.972615957 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.972939014 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.972964048 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:46.973800898 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:46.973807096 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.080498934 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.080943108 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.080975056 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.081389904 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.081397057 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.083565950 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.083914995 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.083998919 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.084286928 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.084304094 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.088901043 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.088979006 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.089121103 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.089179039 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.089200020 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.089210987 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.089216948 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.091988087 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.092041969 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.092156887 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.092328072 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.092338085 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.111008883 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.111036062 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.111099005 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.111156940 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.111157894 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.111324072 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.111354113 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.111385107 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.111401081 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.111836910 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.112104893 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.112171888 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.112195015 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.112211943 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.112221956 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.112226963 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.115329027 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.115397930 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.115492105 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.115642071 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.115663052 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.116303921 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.116358995 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.116650105 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.116874933 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.116902113 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.222271919 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.222364902 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.222433090 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.222650051 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.222676992 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.222709894 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.222718000 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.224026918 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.224107981 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.224256992 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.224407911 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.224442005 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.224472046 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.224486113 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.225481033 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.225558043 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.225637913 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.225840092 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.225853920 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.226460934 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.226495981 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.226653099 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.226810932 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.226825953 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.934740067 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.935308933 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.935385942 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.935409069 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.935867071 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.935874939 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.936530113 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.936593056 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.937020063 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.937179089 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.937194109 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.937555075 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.937572956 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.938080072 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.938092947 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.987782001 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.988281965 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.988306046 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.988627911 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.988807917 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.988817930 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.988940001 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.988967896 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:47.989314079 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:47.989326000 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.070519924 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.070686102 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.070763111 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.070933104 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.070966959 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.070996046 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.071011066 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.074057102 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.074103117 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.074197054 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.074323893 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.074347019 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.079273939 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.079452038 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.079528093 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.079638004 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.079638004 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.079684973 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.079716921 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.081924915 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.081962109 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.082015038 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.082159042 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.082171917 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.146301031 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.146374941 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.146431923 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.146620035 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.146697998 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.146719933 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.146733046 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.146738052 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.146784067 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.146852016 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.146970034 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.146970034 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.147015095 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.147043943 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.147295952 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.147362947 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.147631884 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.147847891 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.147871971 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.147939920 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.147949934 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.150250912 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150274992 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.150377989 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150516987 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150530100 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.150540113 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150566101 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.150638103 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150664091 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150675058 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.150733948 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150743008 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.150765896 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150895119 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.150902033 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.830826044 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.831428051 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.831473112 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.831912041 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.831928015 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.840471983 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.841593027 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.841593027 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.841636896 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.841648102 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.901912928 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.902456045 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.902493954 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.903079987 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.903091908 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.914422035 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.914972067 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.914999008 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.918338060 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.918387890 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.918410063 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.919123888 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.919183016 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.923350096 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.923357010 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.967581987 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.967689991 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.967937946 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.967937946 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.967984915 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.968005896 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.970735073 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.970789909 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.970936060 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.971020937 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.971030951 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.975646019 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.975723982 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.975831032 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.975922108 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.975922108 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.975966930 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.975966930 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.975984097 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.975995064 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.978451014 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.978503942 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:48.978652000 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.978761911 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:48.978775024 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.039429903 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.039849043 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.039911985 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.039940119 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.039974928 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.040067911 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.040067911 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.040096045 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.040108919 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.042701960 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.042790890 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.043029070 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.043029070 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.043102026 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.052107096 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.052167892 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.052371025 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.052371025 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.052400112 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.052418947 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.054655075 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.054678917 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.054770947 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.054924965 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.054935932 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.056114912 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.056265116 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.056371927 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.056396008 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.056396008 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.056410074 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.056420088 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.058219910 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.058259964 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.058403015 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.058463097 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.058479071 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.736733913 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.737334967 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.737375021 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.737793922 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.737801075 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.752137899 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.752667904 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.752685070 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.753257036 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.753264904 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.793874979 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.794406891 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.794445038 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.794867992 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.794874907 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.808762074 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.809473038 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.809489012 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.809701920 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.809709072 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.829648018 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.830070019 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.830080986 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.830507994 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.830513000 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.878217936 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.878312111 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.878367901 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.878560066 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.878582954 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.878597021 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.878603935 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.881409883 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.881457090 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.881522894 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.881648064 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.881658077 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.891352892 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.891504049 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.891563892 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.891592026 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.891612053 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.891622066 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.891629934 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.893542051 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.893567085 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.893683910 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.893802881 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.893816948 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.931790113 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.931821108 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.931869984 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.931881905 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.931926012 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.932070017 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.932070017 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.932109118 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.932135105 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.934194088 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.934236050 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.934377909 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.934524059 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.934551954 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.949305058 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.949389935 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.949462891 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.949692011 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.949738026 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.949771881 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.949786901 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.953768969 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.953800917 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.953850985 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.954093933 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.954108000 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.970933914 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.971012115 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.971066952 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.971174955 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.971189976 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.971198082 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.971201897 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.973798037 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.973829985 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:49.973983049 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.974116087 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:49.974132061 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.657726049 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.658374071 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.658413887 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.658824921 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.658832073 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.660782099 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.663142920 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.663156986 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.663623095 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.663629055 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.709512949 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.710601091 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.710629940 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.711460114 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.711471081 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.716345072 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.716628075 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.717081070 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.717098951 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.717928886 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.717936039 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.718182087 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.718221903 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.718904018 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.718911886 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.794586897 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.794744015 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.794811010 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.795108080 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.795155048 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.795201063 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.795218945 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.796530008 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.796586990 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.796705008 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.796746016 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.796825886 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.797334909 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.797358036 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.803210020 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.803251982 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.803304911 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.804681063 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.804732084 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.804852962 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.805216074 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.805236101 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.805442095 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.805458069 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.849387884 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.849473953 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.849618912 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.850200891 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.850200891 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.850246906 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.850296021 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.853127956 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.853313923 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.853673935 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.854904890 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.854954958 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.855041027 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.855205059 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.855237007 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.855299950 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.855329990 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.855395079 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.855827093 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.855846882 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.855860949 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.855869055 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.859698057 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.859728098 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.859874964 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.860135078 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.860165119 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.860348940 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.860373020 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.860657930 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.860657930 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.860677004 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.860687971 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.870337009 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.870353937 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:50.870832920 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.884763956 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:50.884778976 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.569468975 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.569897890 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.569931984 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.570319891 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.570331097 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.572658062 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.573009968 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.573036909 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.573394060 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.573405027 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.609270096 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.609772921 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.609782934 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.610251904 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.610260010 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.616775036 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.617130995 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.617175102 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.617482901 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.617495060 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.653273106 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.653585911 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.653594017 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.654026985 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.654031992 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.706830978 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.706917048 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.707048893 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.707875967 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.707894087 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.707910061 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.707917929 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.710793972 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.710834980 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.710901976 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.711062908 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.711074114 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.711630106 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.714409113 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.714550972 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.714603901 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.714623928 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.714634895 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.714641094 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.716671944 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.716701984 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:51.716766119 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.716877937 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:51.716887951 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.775893927 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.775965929 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.776093006 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.776433945 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.776467085 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.776524067 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.776531935 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.776556969 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.776566982 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.776573896 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.776578903 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.776583910 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.777086973 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.777159929 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.777230978 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.778250933 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.778268099 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.779206991 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.779212952 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.779284954 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.779289007 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.786143064 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.786230087 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.786313057 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.787216902 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.787285089 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.787358046 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.787580967 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.787632942 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.787803888 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.788068056 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.788105011 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.788186073 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.788230896 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:52.788250923 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:52.788274050 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.384529114 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:53.384679079 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:53.384793043 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:53.540914059 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.542098999 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.544157028 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.547223091 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.547254086 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.548028946 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.548563957 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.548568010 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.549212933 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.549237013 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.550041914 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.550045967 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.550692081 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.550712109 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.551183939 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.551578999 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.551588058 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.552248001 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.552306890 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.553342104 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.553355932 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.554219007 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.554239035 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.555152893 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.555191040 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.683438063 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.683517933 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.683711052 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.683784008 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.683845997 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.683893919 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.683996916 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.684012890 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.684022903 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.684029102 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.684372902 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.684427977 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.684472084 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.684479952 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.684504986 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.685955048 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.685976028 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.685991049 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.685997963 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.687525034 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.687544107 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.687578917 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.687585115 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.690568924 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.690572977 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.690618992 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.690642118 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.690706968 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.690805912 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.693368912 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.693411112 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.694148064 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.694148064 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.694169998 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.694192886 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.697340012 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.697371006 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.697515011 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.699387074 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.699407101 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.699460983 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.699820995 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.699839115 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.700771093 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.700793982 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.700881004 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.701014996 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.701025963 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.701345921 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.701359987 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.705492020 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.705511093 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.705569029 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.705975056 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.705987930 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.710033894 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.710048914 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:53.710148096 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.710282087 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:53.710288048 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.648658037 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.649406910 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.649431944 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.649885893 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.649893045 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.652384043 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.653526068 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.654422998 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.654998064 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.660264015 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.660285950 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.660784006 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.660789013 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.671195030 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.671200991 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.678901911 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.678905964 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.681324959 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.681366920 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.688841105 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.688848972 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.690975904 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.690989971 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.707310915 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.707323074 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.786583900 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.786672115 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.786730051 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.786895037 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.786917925 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.786931038 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.786937952 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.789532900 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.789565086 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.789628983 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.789777994 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.789793968 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.793792963 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.793843031 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.793909073 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.794059992 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.794059992 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.794070959 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.794078112 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.796595097 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.796658993 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.796744108 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.796869993 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.796901941 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.827594042 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.827658892 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.827784061 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.827847958 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.827868938 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.827888012 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.827893972 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.830049992 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.830082893 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.830138922 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.830276966 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.830291033 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.839843988 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.839915991 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.840020895 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.840025902 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.840073109 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.840121031 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.840127945 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.840141058 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.840146065 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.841892958 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.841976881 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.842050076 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.842180014 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.842204094 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.844347000 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.844738960 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.844777107 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.844783068 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.844825983 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.844868898 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.844876051 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.844882011 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.844886065 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.846545935 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.846556902 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:54.846610069 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.846728086 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:54.846739054 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.364686966 CEST	49818	443	192.168.2.4	172.217.16.196
Oct 24, 2024 18:19:55.364727020 CEST	443	49818	172.217.16.196	192.168.2.4
Oct 24, 2024 18:19:55.537883997 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.538398981 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.538430929 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.538861036 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.538870096 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.550061941 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.550846100 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.550847054 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.550884962 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.550904036 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.582782984 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.583113909 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.583143950 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.583491087 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.583498001 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.611138105 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.611449957 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.611481905 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.611861944 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.611867905 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.612227917 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.612620115 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.612627029 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.612771988 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.612783909 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.674226046 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.674756050 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.674813032 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.674868107 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.674890995 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.674905062 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.674911976 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.677359104 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.677412033 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.677604914 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.677722931 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.677740097 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.687542915 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.687577009 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.687629938 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.687633991 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.687700033 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.687855005 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.687855005 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.687865019 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.687875986 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.689807892 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.689836979 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.689980030 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.690083981 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.690094948 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.721086025 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.721149921 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.721206903 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.721393108 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.721407890 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.721431017 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.721436977 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.723901987 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.723989964 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.724081993 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.724205971 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.724225998 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.751213074 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.751249075 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.751302958 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.751369953 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.751490116 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.751490116 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.751524925 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.751552105 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.753114939 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.753467083 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.753529072 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.753662109 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.753669977 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.753736019 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.753741026 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.753880024 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.753910065 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.754000902 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.754257917 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.754271030 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.755297899 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.755347967 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:55.755476952 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.755575895 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:55.755589962 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.435810089 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.436362028 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.436428070 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.436777115 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.436794043 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.454678059 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.455221891 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.455239058 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.455670118 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.455676079 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.473177910 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.473736048 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.473798990 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.474107981 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.474126101 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.516813993 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.517218113 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.517286062 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.517303944 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.517539024 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.517568111 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.517690897 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.517699957 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.518065929 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.518071890 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.573579073 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.573601961 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.573647976 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.573698044 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.573878050 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.573904991 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.573921919 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.573930025 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.576309919 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.576339960 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.576492071 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.576626062 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.576637030 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.593719006 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.593791008 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.593969107 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.593969107 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.594079971 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.594094038 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.595873117 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.595923901 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.596101046 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.596101046 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.596137047 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.610213995 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.610352039 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.610436916 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.610457897 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.610546112 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.610582113 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.610582113 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.610601902 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.610615015 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.612358093 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.612396002 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.612771988 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.612771988 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.612802982 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657143116 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657196045 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657253027 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657326937 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657346010 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.657423019 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.657423019 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.657440901 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657454014 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.657459021 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657552004 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.657567978 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.657594919 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.657601118 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.659737110 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.659846067 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.659985065 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.659991980 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.660000086 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.660053968 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.660077095 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.660096884 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:56.660218954 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:56.660226107 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.313811064 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.314670086 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.314670086 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.314687014 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.314701080 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.346153975 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.346829891 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.346829891 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.346863985 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.346885920 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.378071070 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.378822088 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.378822088 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.378845930 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.378860950 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.410691977 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.411407948 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.411407948 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.411461115 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.411501884 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.424707890 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.425196886 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.425218105 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.425540924 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.425544977 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.447948933 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.448333979 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.448407888 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.448407888 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.448509932 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.448523998 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.450803995 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.450858116 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.450983047 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.451082945 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.451100111 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.483819962 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.483840942 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.483870983 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.483906984 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.483933926 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.484086037 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.484102011 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.484128952 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.484134912 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.486197948 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.486231089 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.486416101 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.486416101 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.486439943 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.517050028 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.517121077 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.517247915 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.517247915 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.517307997 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.517321110 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.518899918 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.518934011 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.519422054 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.519422054 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.519454002 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.552011013 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.552057028 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.552246094 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.552246094 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.552246094 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.554024935 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.554040909 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.554146051 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.554223061 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.554233074 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.565881014 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.565928936 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.566030979 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.566109896 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.566159010 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.566159010 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.566167116 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.566191912 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.566196918 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.567883015 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.567914009 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.568069935 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.568130970 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.568147898 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:57.769179106 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:57.769206047 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.207895994 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.208312988 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.208349943 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.208729982 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.208745003 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.247853994 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.248311996 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.248330116 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.248739958 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.248745918 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.286186934 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.286653042 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.286679983 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.287372112 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.287379026 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.317248106 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.317599058 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.317609072 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.318022966 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.318028927 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.339792967 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.340176105 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.340187073 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.340672970 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.340677977 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.348275900 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.348454952 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.348507881 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.348663092 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.348692894 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.348725080 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.348740101 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.352256060 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.352293015 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.352354050 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.352484941 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.352490902 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.387701988 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.387833118 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.387885094 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.388056993 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.388073921 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.388092041 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.388102055 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.391088009 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.391125917 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.391191006 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.391328096 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.391336918 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.425040960 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.425072908 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.425126076 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.425127029 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.425167084 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.425326109 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.425343990 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.425358057 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.425364971 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.428061962 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.428091049 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.428137064 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.428577900 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.428596020 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.460221052 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.460330963 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.460388899 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.460536957 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.460546970 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.460560083 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.460566044 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.462872028 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.462902069 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.463164091 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.463335037 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.463344097 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.940419912 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.940498114 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.940599918 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.940618992 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.940831900 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.940901995 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.940901995 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.940943956 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.940969944 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.943613052 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.943650961 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:58.943873882 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.944014072 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:58.944030046 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.101365089 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.102065086 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.102097988 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.106565952 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.106574059 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.155715942 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.156470060 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.156470060 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.156502008 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.156518936 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.178270102 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.178946972 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.178946972 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.178972960 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.178987980 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.233469963 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.234344006 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.234344006 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.234374046 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.234396935 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.237926006 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.238178968 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.238266945 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.238266945 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.238332987 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.238364935 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.240895987 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.240992069 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.241178989 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.241254091 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.241271973 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.292505980 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.293165922 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.293292999 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.293292999 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.293601036 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.293616056 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.295434952 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.295463085 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.295701981 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.295701981 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.295726061 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.314728022 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.315051079 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.315119982 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.315190077 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.315211058 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.315340996 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.315347910 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.317011118 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.317096949 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.317269087 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.317270041 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.317356110 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.370747089 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.370824099 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.371023893 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.371023893 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.371320963 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.371335983 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.372853994 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.372874975 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.373023033 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.373051882 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.373059034 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.713172913 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.713615894 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.713638067 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.714021921 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.714027882 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.852715969 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.852890968 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.852960110 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.853005886 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.853019953 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.853030920 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.853039026 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.855999947 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.856035948 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 24, 2024 18:19:59.856162071 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.856355906 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:19:59.856365919 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.016958952 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.017508030 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.017573118 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.017807007 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.017822981 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.049633026 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.050142050 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.050158024 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.050554991 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.050559998 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.085750103 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.086148024 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.086173058 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.086697102 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.086705923 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.156699896 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.157115936 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.157152891 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.157646894 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.157656908 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.159416914 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.159774065 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.159866095 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.159918070 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.159936905 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.159953117 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.159960032 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.163127899 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.163160086 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.163389921 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.163527012 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.163539886 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.186840057 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.187395096 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.187458038 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.187566042 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.187581062 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.187592030 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.187597990 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.189667940 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.189697981 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.189755917 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.189991951 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.190015078 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.224499941 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.224565029 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.224630117 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.224689007 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.224729061 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.224762917 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.224805117 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.224829912 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.224829912 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.224849939 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.224873066 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.227264881 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.227329969 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.227395058 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.227528095 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.227555037 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.297436953 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.297511101 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.297573090 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.297916889 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.297918081 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.297956944 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.297998905 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.300648928 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.300692081 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 24, 2024 18:20:00.300751925 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.300964117 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:20:00.300981998 CEST	443	49909	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 18:18:38.713459015 CEST	53	52531	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:38.728951931 CEST	53	58588	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:40.086546898 CEST	53	52077	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:40.137968063 CEST	50346	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:40.139691114 CEST	60704	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:40.158488035 CEST	53	60704	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:40.161287069 CEST	50673	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:40.161422014 CEST	61918	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:40.166109085 CEST	53	50346	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:40.172872066 CEST	53	61918	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:40.175767899 CEST	53	50673	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:42.426395893 CEST	53889	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:42.426618099 CEST	50693	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:42.434145927 CEST	53	50693	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:42.434540987 CEST	53	53889	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:52.928276062 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 18:18:53.790766954 CEST	64976	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:53.790956974 CEST	62587	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:18:53.809324026 CEST	53	62587	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:53.923706055 CEST	53	64976	1.1.1.1	192.168.2.4
Oct 24, 2024 18:18:57.154541016 CEST	53	52783	1.1.1.1	192.168.2.4
Oct 24, 2024 18:19:07.216758013 CEST	51274	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:19:07.217020035 CEST	63987	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:19:07.236876965 CEST	53	51274	1.1.1.1	192.168.2.4
Oct 24, 2024 18:19:07.243204117 CEST	53	63987	1.1.1.1	192.168.2.4
Oct 24, 2024 18:19:16.122015953 CEST	53	55207	1.1.1.1	192.168.2.4
Oct 24, 2024 18:19:38.345815897 CEST	53	55917	1.1.1.1	192.168.2.4
Oct 24, 2024 18:19:39.186815977 CEST	53	63564	1.1.1.1	192.168.2.4
Oct 24, 2024 18:19:42.488544941 CEST	64624	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:19:42.488742113 CEST	53394	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:19:42.495966911 CEST	53	64624	1.1.1.1	192.168.2.4
Oct 24, 2024 18:19:42.495995998 CEST	53	53394	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 18:18:40.166196108 CEST	192.168.2.4	1.1.1.1	c209	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 18:18:40.137968063 CEST	192.168.2.4	1.1.1.1	0x1f0f	Standard query (0)	www.teachtravel.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:40.139691114 CEST	192.168.2.4	1.1.1.1	0x6106	Standard query (0)	www.teachtravel.org	65	IN (0x0001)	false
Oct 24, 2024 18:18:40.161287069 CEST	192.168.2.4	1.1.1.1	0xe0a2	Standard query (0)	www.teachtravel.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:40.161422014 CEST	192.168.2.4	1.1.1.1	0x61c1	Standard query (0)	www.teachtravel.org	65	IN (0x0001)	false
Oct 24, 2024 18:18:42.426395893 CEST	192.168.2.4	1.1.1.1	0x58a1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:42.426618099 CEST	192.168.2.4	1.1.1.1	0xed1a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 18:18:53.790766954 CEST	192.168.2.4	1.1.1.1	0x5ec4	Standard query (0)	teachtravel.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:53.790956974 CEST	192.168.2.4	1.1.1.1	0x8968	Standard query (0)	teachtravel.org	65	IN (0x0001)	false
Oct 24, 2024 18:19:07.216758013 CEST	192.168.2.4	1.1.1.1	0x20cb	Standard query (0)	teachtravel.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:19:07.217020035 CEST	192.168.2.4	1.1.1.1	0x1517	Standard query (0)	teachtravel.org	65	IN (0x0001)	false
Oct 24, 2024 18:19:42.488544941 CEST	192.168.2.4	1.1.1.1	0x6d7e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:19:42.488742113 CEST	192.168.2.4	1.1.1.1	0x4f6e	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 18:18:40.158488035 CEST	1.1.1.1	192.168.2.4	0x6106	No error (0)	www.teachtravel.org			65	IN (0x0001)	false
Oct 24, 2024 18:18:40.166109085 CEST	1.1.1.1	192.168.2.4	0x1f0f	No error (0)	www.teachtravel.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:40.166109085 CEST	1.1.1.1	192.168.2.4	0x1f0f	No error (0)	www.teachtravel.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:40.172872066 CEST	1.1.1.1	192.168.2.4	0x61c1	No error (0)	www.teachtravel.org			65	IN (0x0001)	false
Oct 24, 2024 18:18:40.175767899 CEST	1.1.1.1	192.168.2.4	0xe0a2	No error (0)	www.teachtravel.org		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:40.175767899 CEST	1.1.1.1	192.168.2.4	0xe0a2	No error (0)	www.teachtravel.org		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:42.434145927 CEST	1.1.1.1	192.168.2.4	0xed1a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 18:18:42.434540987 CEST	1.1.1.1	192.168.2.4	0x58a1	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:53.923706055 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	teachtravel.org		205.174.25.210	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:55.368238926 CEST	1.1.1.1	192.168.2.4	0xbea7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:18:55.368238926 CEST	1.1.1.1	192.168.2.4	0xbea7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:56.672053099 CEST	1.1.1.1	192.168.2.4	0x73e8	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:18:56.672053099 CEST	1.1.1.1	192.168.2.4	0x73e8	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:19:07.236876965 CEST	1.1.1.1	192.168.2.4	0x20cb	No error (0)	teachtravel.org		205.174.25.210	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:19:29.088977098 CEST	1.1.1.1	192.168.2.4	0x1932	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:19:29.088977098 CEST	1.1.1.1	192.168.2.4	0x1932	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:19:29.088977098 CEST	1.1.1.1	192.168.2.4	0x1932	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:19:42.495966911 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:19:42.495995998 CEST	1.1.1.1	192.168.2.4	0x4f6e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 18:19:51.717417002 CEST	1.1.1.1	192.168.2.4	0x961f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:19:51.717417002 CEST	1.1.1.1	192.168.2.4	0x961f	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:19:51.717417002 CEST	1.1.1.1	192.168.2.4	0x961f	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.teachtravel.org

fs.microsoft.com

slscr.update.microsoft.com

teachtravel.org

https:

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	188.114.96.3	443	1016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:18:41 UTC	662	OUT	GET / HTTP/1.1 Host: www.teachtravel.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 16:18:53 UTC	962	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 24 Oct 2024 16:18:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.3.12 expires: Thu, 24 Oct 2024 17:18:53 GMT Cache-Control: max-age=3600 x-redirect-by: WordPress vary: Accept-Encoding location: https://teachtravel.org/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pdfxkzp4JmJqbgZ6Cou5dKUtENBIPWLX8s7%2F6iU1PHwwTGjtOYhyo%2BoDP9FGOyYPs2Svd8lZc5Rqs2nTj4gX8cGhktV1GHxEYpitgSEsRLQp7gP%2BxLxquQXMkePeVcf8CyN4Bjra"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7b48c1ba0e477e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1881&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1240&delivery_rate=1533898&cwnd=250&unsent_bytes=0&cid=aca38db62f669035&ts=12342&x=0"
2024-10-24 16:18:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:18:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 16:18:44 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=1610 Date: Thu, 24 Oct 2024 16:18:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:18:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 16:18:46 UTC	513	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=1637 Date: Thu, 24 Oct 2024 16:18:45 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 16:18:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:18:53 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=G76yMLgczP871mZ&MD=g5bbxdDm HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 16:18:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: aba72e54-30bc-46c6-9c35-0243bd2e9ac6 MS-RequestId: c88ff2ee-5981-4f8e-a464-1168424632a7 MS-CV: 4yN+KtSGok2k6WiU.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 16:18:52 GMT Connection: close Content-Length: 24490
2024-10-24 16:18:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 16:18:53 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	205.174.25.210	443	1016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:18:54 UTC	658	OUT	GET / HTTP/1.1 Host: teachtravel.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 16:19:01 UTC	441	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:18:54 GMT Server: Apache X-Powered-By: PHP/8.3.12 Link: <https://teachtravel.org/wp-json/>; rel="https://api.w.org/", <https://teachtravel.org/wp-json/wp/v2/pages/7>; rel="alternate"; title="JSON"; type="application/json", <https://teachtravel.org/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	205.174.25.210	443	1016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:02 UTC	586	OUT	GET /favicon.ico HTTP/1.1 Host: teachtravel.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://teachtravel.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 16:19:06 UTC	414	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 16:19:03 GMT Server: Apache X-Powered-By: PHP/8.3.12 Link: <https://teachtravel.org/wp-json/>; rel="https://api.w.org/" X-Redirect-By: WordPress Upgrade: h2,h2c Connection: Upgrade, close Location: https://teachtravel.org/wp-content/uploads/2022/06/cropped-tt-32x32.png Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	205.174.25.210	443	1016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:07 UTC	622	OUT	GET /wp-content/uploads/2022/06/cropped-tt-32x32.png HTTP/1.1 Host: teachtravel.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://teachtravel.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 16:19:07 UTC	232	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 09 Jun 2022 17:18:58 GMT Accept-Ranges: bytes Content-Length: 1249 Content-Type: image/png
2024-10-24 16:19:07 UTC	1249	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 a8 49 44 41 54 58 c3 d5 97 6b 6c 14 55 14 c7 cf bd f3 9e d9 f7 76 77 5b b6 40 e5 51 a4 54 a0 ae 51 34 24 d0 44 b1 24 c6 c4 68 20 a8 48 d4 92 10 01 29 01 13 e3 2b 51 0c 09 ad b4 51 44 4a 24 a5 12 05 0c 10 35 04 f9 82 ca 53 23 0a 2d b6 a5 40 21 b4 14 b6 74 29 4b 77 da dd 9d 9d c7 bd 7e a1 da 06 11 86 2d 44 cf c7 73 ef ff cc 2f 73 cf ff cc 1d 14 29 9d 87 5a e2 9c a4 59 08 43 96 21 73 38 93 6a d8 6c d8 d1 b0 54 f1 85 90 9a ae 01 4a c2 03 49 0e a3 0c cf 90 6b 1c c3 18 49 9d 06 0d 42 05 00 00 a0 00 21 8f d4 2b 70 4c e2 4a 22 e9 c8 18 d4 4b 00 f0 c0 da a8 3c 4f fd a9 06 a8 b3 05 20 0a 5c 2e a5 a9 52 00 08 31 08 d2 3e 85 d9 e7 95 b9 2d 4e 81 36 53 4a 71 53 Data Ascii: PNGIHDR szzIDATXklUvw[@QTQ4$D$h H)+QQDJ$5S#-@!t)Kw~-Ds/s)ZYC!s8jlTJIkIB!+pLJ"K<O \.R1>-N6SJqS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	205.174.25.210	443	1016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:07 UTC	386	OUT	GET /wp-content/uploads/2022/06/cropped-tt-32x32.png HTTP/1.1 Host: teachtravel.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 16:19:08 UTC	232	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:08 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 09 Jun 2022 17:18:58 GMT Accept-Ranges: bytes Content-Length: 1249 Content-Type: image/png
2024-10-24 16:19:08 UTC	1249	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 a8 49 44 41 54 58 c3 d5 97 6b 6c 14 55 14 c7 cf bd f3 9e d9 f7 76 77 5b b6 40 e5 51 a4 54 a0 ae 51 34 24 d0 44 b1 24 c6 c4 68 20 a8 48 d4 92 10 01 29 01 13 e3 2b 51 0c 09 ad b4 51 44 4a 24 a5 12 05 0c 10 35 04 f9 82 ca 53 23 0a 2d b6 a5 40 21 b4 14 b6 74 29 4b 77 da dd 9d 9d c7 bd 7e a1 da 06 11 86 2d 44 cf c7 73 ef ff cc 2f 73 cf ff cc 1d 14 29 9d 87 5a e2 9c a4 59 08 43 96 21 73 38 93 6a d8 6c d8 d1 b0 54 f1 85 90 9a ae 01 4a c2 03 49 0e a3 0c cf 90 6b 1c c3 18 49 9d 06 0d 42 05 00 00 a0 00 21 8f d4 2b 70 4c e2 4a 22 e9 c8 18 d4 4b 00 f0 c0 da a8 3c 4f fd a9 06 a8 b3 05 20 0a 5c 2e a5 a9 52 00 08 31 08 d2 3e 85 d9 e7 95 b9 2d 4e 81 36 53 4a 71 53 Data Ascii: PNGIHDR szzIDATXklUvw[@QTQ4$D$h H)+QQDJ$5S#-@!t)Kw~-Ds/s)ZYC!s8jlTJIkIB!+pLJ"K<O \.R1>-N6SJqS

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49752	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:29 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:30 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:29 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161929Z-r1755647c66prnf6k99z0m3kzc0000000a0g000000006hfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:30 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 16:19:30 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 16:19:31 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49758	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:32 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:32 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161932Z-r1755647c66j878m0wkraqty3800000008f0000000007pyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:32 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49756	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:32 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:32 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161932Z-r1755647c66nfj7t97c2qyh6zg00000006ug0000000075b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:32 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49757	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:32 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:32 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161932Z-r1755647c66nxct5p0gnwngmx000000009a0000000003696 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49755	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:32 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:32 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161932Z-17fbfdc98bb6j78ntkx6e2fx4c00000007cg00000000a4y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:32 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49754	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:32 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:32 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:32 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161932Z-r1755647c66x7vzx9armv8e3cw00000000xg000000008a6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:19:32 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:32 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=G76yMLgczP871mZ&MD=g5bbxdDm HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 16:19:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 9823ccba-2de6-4146-b919-c45ce04cad5c MS-RequestId: 48f7f917-45a7-4608-ae03-1affe92fcab0 MS-CV: ZPbuWkHWhUyrbAKU.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 16:19:31 GMT Connection: close Content-Length: 30005
2024-10-24 16:19:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 16:19:32 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49759	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161933Z-17fbfdc98bb9tt772yde9rhbm800000007gg000000006qse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49762	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:33 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161933Z-r1755647c66zs9x4962sbyaz1w000000081g00000000cx93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:33 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49761	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161933Z-r1755647c66f2zlraraf0y5hrs00000008cg00000000bqfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49760	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f6e64d82-401e-0029-2a5d-239b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161933Z-17fbfdc98bbx648l6xmxqcmf2000000007m0000000002eum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49763	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:33 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161933Z-r1755647c66lljn2k9s29ch9ts0000000a1g000000004zvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:33 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49764	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-r1755647c66m4jttnz6nb8kzng00000008dg000000009y9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49765	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-r1755647c66x7vzx9armv8e3cw00000000vg00000000awh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49766	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:33 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-17fbfdc98bb8xnvm6t4x6ec5m4000000079000000000c3ku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49767	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:34 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a95f3241-e01e-0020-1c5d-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-17fbfdc98bb7qlzm4x52d2225c00000007gg000000006tr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49768	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:34 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-r1755647c669hnl7dkxy835cqc00000007q000000000agvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:34 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: fe83e199-601e-00ab-415a-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-17fbfdc98bblptj7fr9s141cpc00000007gg000000007qnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:34 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-r1755647c66fnxpdavnqahfp1w0000000890000000002d63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49771	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:34 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-r1755647c66k9st9tvd58z9dg800000009w000000000c081 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:34 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:34 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161934Z-17fbfdc98bblfj7gw4f18guu2800000000sg000000005706 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:35 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161935Z-17fbfdc98bblvnlh5w88rcarag00000007sg00000000079a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:35 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161935Z-r1755647c66l72xfkr6ug378ks00000008t000000000b11e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:35 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161935Z-17fbfdc98bbg2mc9qrpn009kgs00000007k000000000a0fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:35 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161935Z-17fbfdc98bb94gkbvedtsa5ef400000007gg00000000969e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161935Z-r1755647c66tmf6g4720xfpwpn0000000aqg00000000ac0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:35 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:35 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161935Z-r1755647c66z4pt7cv1pnqayy40000000a30000000001uv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:36 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:36 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161936Z-r1755647c66l72xfkr6ug378ks00000008w0000000006gtf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49780	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:36 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161936Z-r1755647c66sn7s9kfw6gzvyp00000000a30000000001f7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:36 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161936Z-r1755647c66x2fg5vpbex0bd8400000000q0000000009nc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:36 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:36 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161936Z-17fbfdc98bb2fzn810kvcg2zng00000007k000000000agpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:36 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:36 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:36 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ae9ca414-101e-008d-470d-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161936Z-17fbfdc98bblfj7gw4f18guu2800000000u00000000032xb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:37 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:37 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161937Z-17fbfdc98bbp4fvlbnh222662800000000fg000000003nbs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:37 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161937Z-17fbfdc98bbvf2fnx6t6w0g25n00000007hg000000008aa8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:37 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5fe4afb9-d01e-008e-4659-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161937Z-17fbfdc98bbkw9phumvsc7yy8w00000007n0000000001580 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:37 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:37 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161937Z-r1755647c66kv68zfmyfrbcqzg00000008gg000000005511 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:37 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49788	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:37 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:37 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161937Z-r1755647c66h2wzt2z0cr0zc74000000042g000000009auz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:37 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:38 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:38 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161938Z-r1755647c66lljn2k9s29ch9ts0000000a3g000000000g4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:38 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:38 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:38 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161938Z-r1755647c66z4pt7cv1pnqayy400000009wg00000000bzf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:38 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49792	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:38 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:38 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161938Z-17fbfdc98bbvcvlzx1n0fduhm000000007p0000000006435 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:38 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:38 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161938Z-17fbfdc98bbpc9nz0r22pywp0800000007n0000000008359 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:38 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1b8ca13b-901e-008f-4667-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161938Z-r1755647c66ldfgxa3qp9d53us0000000a00000000006xc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:39 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:39 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161939Z-r1755647c66xkk8sn093pbsnz8000000010g00000000980k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:39 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49797	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:39 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:39 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:39 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161939Z-17fbfdc98bbh7l5skzh3rekksc00000000q0000000005bfp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:39 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:39 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161939Z-r1755647c66mgrw7zd8m1pn55000000008h0000000004nfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49798	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:39 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:39 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b6b4fe6b-401e-008c-805d-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161939Z-17fbfdc98bb75b2fuh11781a0n00000007fg00000000568y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:39 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49799	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:39 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 8d905448-c01e-0079-0365-23e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161939Z-17fbfdc98bbnhb2b0umpa641c800000007f0000000005s7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:40 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:40 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f651688a-e01e-0071-5b56-2308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161940Z-17fbfdc98bbnpjstwqrbe0re7n00000007m0000000000sv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:40 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b77bb2bd-c01e-0034-3fa4-242af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161940Z-17fbfdc98bbwj6cp6df5812g4s00000000wg000000002rpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:40 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: ff232012-901e-0016-0292-1fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161940Z-r1755647c66vrwbmeqw88hpesn00000009q0000000009tw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:40 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161940Z-r1755647c66z4pt7cv1pnqayy400000009y000000000a53t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:40 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e93de7dd-201e-006e-73e3-20bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161940Z-r1755647c66wjht63r8k9qqnrs00000008e0000000009cdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:41 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161941Z-17fbfdc98bblvnlh5w88rcarag00000007qg000000004f2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:41 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:41 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161941Z-17fbfdc98bbvvplhck7mbap4bw0000000100000000003nx7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:41 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161941Z-17fbfdc98bblptj7fr9s141cpc00000007ng0000000002wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:41 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161941Z-r1755647c66f2zlraraf0y5hrs00000008c000000000c9wz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:41 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161941Z-17fbfdc98bbndwgn5b4pg7s8bs00000007b000000000bfg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:42 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:42 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f58edff3-b01e-0002-5659-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161942Z-17fbfdc98bb7qlzm4x52d2225c00000007f0000000008x0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:42 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:42 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:42 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161942Z-r1755647c66f4bf880huw27dwc00000000rg0000000017z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:42 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:42 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:42 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161942Z-17fbfdc98bbpc9nz0r22pywp0800000007ng0000000076ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:42 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:42 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161942Z-17fbfdc98bbkw9phumvsc7yy8w00000007hg00000000641g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:42 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:42 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161942Z-r1755647c669hnl7dkxy835cqc00000007s0000000007rfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:42 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:43 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161943Z-r1755647c66fnxpdavnqahfp1w00000008800000000053qg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:43 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161943Z-r1755647c66x7vzx9armv8e3cw00000000y000000000731h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:43 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:43 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161943Z-r1755647c66vrwbmeqw88hpesn00000009mg00000000bttk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:43 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:43 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:43 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161943Z-r1755647c66zs9x4962sbyaz1w0000000860000000006cbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:43 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:43 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:43 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:43 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161943Z-17fbfdc98bbp4fvlbnh222662800000000mg000000002nbt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:43 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:44 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161944Z-r1755647c66cdf7jx43n17haqc0000000aug000000003cdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:44 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161944Z-17fbfdc98bbndwgn5b4pg7s8bs00000007d0000000008nv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:44 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:44 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 310b9d61-301e-0051-4f21-2138bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161944Z-r1755647c66lljn2k9s29ch9ts0000000a1g00000000503y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:44 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:44 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161944Z-r1755647c66xrxq4nv7upygh4s00000003c000000000by4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:44 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161944Z-17fbfdc98bbcrtjhdvnfuyp28800000007r0000000002y86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:45 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:45 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161945Z-r1755647c66d87vp2n0g7qt8bn00000009a00000000039gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:45 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:45 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:45 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161945Z-17fbfdc98bbl89flqtm21qm6rn00000007mg000000007s5g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:45 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9728de04-701e-0097-2579-23b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161945Z-17fbfdc98bbnpjstwqrbe0re7n00000007cg00000000az9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:45 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:45 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161945Z-r1755647c66cdf7jx43n17haqc0000000ar0000000009mz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:45 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:45 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161945Z-r1755647c66zs9x4962sbyaz1w000000085g000000007dqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:46 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161946Z-17fbfdc98bb7qlzm4x52d2225c00000007mg000000001mv5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:46 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:46 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fd7883f4-d01e-0017-7959-23b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161946Z-r1755647c66kv68zfmyfrbcqzg00000008fg0000000072yp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:46 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:46 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161946Z-17fbfdc98bbqc8zsbguzmabx6800000007c0000000009pw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:46 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:46 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6d4b4f71-e01e-00aa-4a56-23ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161946Z-17fbfdc98bb4k5z6ayu7yh2rsn00000007hg000000008wbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:46 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:46 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161946Z-17fbfdc98bbkw9phumvsc7yy8w00000007e000000000aurf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:46 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161946Z-17fbfdc98bb6j78ntkx6e2fx4c00000007ag00000000bcy2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:47 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:47 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 2029fa05-d01e-005a-4bf2-257fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161947Z-17fbfdc98bbwj6cp6df5812g4s00000000sg000000008sy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:47 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:46 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:47 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161947Z-17fbfdc98bb75b2fuh11781a0n00000007ag00000000br0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:47 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:47 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:47 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161947Z-17fbfdc98bbp4fvlbnh222662800000000fg000000003ns8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:47 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:47 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:47 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c39a1591-e01e-001f-5e5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161947Z-17fbfdc98bblvnlh5w88rcarag00000007s00000000010bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:47 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:47 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161947Z-r1755647c66ldfgxa3qp9d53us0000000a3g000000000mra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:48 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:47 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161947Z-17fbfdc98bbx648l6xmxqcmf2000000007k0000000004dm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:48 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:47 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161947Z-17fbfdc98bbl89flqtm21qm6rn00000007gg00000000akc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:48 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:47 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161948Z-r1755647c668mbb8rg8s8fbge400000006yg000000001f5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:47 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161948Z-17fbfdc98bbpc9nz0r22pywp0800000007mg0000000089ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:48 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:48 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c39afafb-e01e-001f-695d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161948Z-17fbfdc98bbcrtjhdvnfuyp28800000007mg00000000976c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:48 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:48 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: e3d367a8-d01e-0028-7850-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161948Z-17fbfdc98bbcrtjhdvnfuyp28800000007kg00000000a6h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:48 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161948Z-17fbfdc98bbp4fvlbnh222662800000000kg000000003sme x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:48 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c0ec81ab-901e-007b-3892-1fac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161948Z-r1755647c66z4pt7cv1pnqayy400000009wg00000000bzu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:48 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161948Z-r1755647c66xkk8sn093pbsnz80000000150000000002cwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:49 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161949Z-r1755647c66gb86l6k27ha2m1c00000008kg000000001au3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:49 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: c4804143-f01e-0003-2fe0-254453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161949Z-17fbfdc98bbwj6cp6df5812g4s00000000xg0000000010t1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:49 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161949Z-17fbfdc98bbh7l5skzh3rekksc00000000gg000000008yv0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:49 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161949Z-r1755647c66dj7986akr8tvaw4000000098g000000005c5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:49 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2ea30268-a01e-006f-2759-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161949Z-17fbfdc98bbh7l5skzh3rekksc00000000mg00000000ab62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:50 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 0f0ed433-b01e-0053-635d-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161950Z-17fbfdc98bb7qlzm4x52d2225c00000007e000000000a1q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:50 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:50 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161950Z-r1755647c66z4pt7cv1pnqayy400000009yg000000009a6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:50 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:50 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:50 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161950Z-17fbfdc98bbczcjda6v8hpct4c00000001600000000078th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:50 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:50 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161950Z-r1755647c66f4bf880huw27dwc00000000s00000000004kt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:50 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:50 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 04ace5c9-101e-007a-5c26-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161950Z-r1755647c66f4bf880huw27dwc00000000gg000000009n8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:19:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:51 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:51 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161951Z-17fbfdc98bbpc9nz0r22pywp0800000007ng000000007706 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:51 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:51 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:51 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: fca683ae-601e-0070-466b-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161951Z-17fbfdc98bb7qlzm4x52d2225c00000007k0000000004cuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:51 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:51 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:51 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161951Z-r1755647c66mgrw7zd8m1pn55000000008g0000000006nfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:51 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:51 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161951Z-r1755647c66f4bf880huw27dwc00000000mg00000000892f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:51 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:51 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ba25bf78-401e-0015-2450-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161951Z-r1755647c668mbb8rg8s8fbge400000006vg0000000075rv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:53 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161953Z-17fbfdc98bbgzrcvp7acfz2d3000000007h0000000009zrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:53 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1b20d623-a01e-0098-6292-1f8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161953Z-r1755647c66cdf7jx43n17haqc0000000avg000000001bmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:53 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161953Z-17fbfdc98bbvwcxrk0yzwg4d5800000007m0000000006gwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:53 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161953Z-r1755647c66k9st9tvd58z9dg80000000a1g000000004srp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:53 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: b1cc7e4f-b01e-001e-6956-230214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161953Z-17fbfdc98bbl89flqtm21qm6rn00000007hg00000000a7ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:54 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:54 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:54 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 55805c6b-301e-0052-57c0-2065d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161954Z-r1755647c66x7vzx9armv8e3cw00000000v000000000b3u9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:54 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 28e56280-601e-003d-4259-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161954Z-17fbfdc98bbn5xh71qanksxprn00000007p00000000063s3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:54 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:54 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:54 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161954Z-17fbfdc98bbgqz661ufkm7k13c00000007d00000000093cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:54 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 05a445fd-e01e-0033-109d-244695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161954Z-r1755647c66gb86l6k27ha2m1c00000008hg000000003td5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:54 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:54 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:54 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161954Z-17fbfdc98bbczcjda6v8hpct4c000000017g000000005pt3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:54 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:55 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:55 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 90f594d0-e01e-0003-5056-230fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161955Z-17fbfdc98bbnhb2b0umpa641c800000007k0000000000wxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:55 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:55 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:55 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dc073066-d01e-0065-6c50-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161955Z-17fbfdc98bbvf2fnx6t6w0g25n00000007k00000000080x1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:55 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:55 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:55 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161955Z-17fbfdc98bbn5xh71qanksxprn00000007mg0000000083tx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:55 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:55 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:55 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9144373a-f01e-005d-575a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161955Z-17fbfdc98bbgqz661ufkm7k13c00000007cg000000009g1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:55 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:55 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:55 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 28aaec9d-301e-0033-281d-26fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161955Z-r1755647c66pzcrw3ktqe96x2s00000000kg000000004acg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:19:55 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:56 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:56 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161956Z-17fbfdc98bbg2mc9qrpn009kgs00000007rg00000000228k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:56 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:56 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:56 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 7b3b656d-301e-0020-5492-1f6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161956Z-r1755647c66sn7s9kfw6gzvyp000000009zg000000008kdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:56 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:56 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:56 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161956Z-r1755647c66x2fg5vpbex0bd8400000000pg0000000094b2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:56 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:56 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:56 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161956Z-r1755647c66d87vp2n0g7qt8bn000000093g00000000dr8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:56 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:56 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:56 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: f7b99165-401e-0035-1ce4-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161956Z-17fbfdc98bblfj7gw4f18guu2800000000v0000000000syw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:56 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:57 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:57 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 838d9442-801e-0047-1a63-1f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161957Z-r1755647c66lljn2k9s29ch9ts00000009xg00000000b8vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:57 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:57 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:57 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 563c5de3-c01e-0034-155d-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161957Z-17fbfdc98bb2fzn810kvcg2zng00000007h000000000bgdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:57 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:57 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:57 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161957Z-r1755647c66x46wg1q56tyyk68000000099g000000004n7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:57 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:57 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:57 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:57 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 9e5c5f24-f01e-001f-3156-235dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161957Z-17fbfdc98bbp4fvlbnh222662800000000dg000000003zc0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:57 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:57 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:57 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161957Z-r1755647c66d87vp2n0g7qt8bn000000099g000000004q7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:57 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:58 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161958Z-r1755647c66x7vzx9armv8e3cw0000000110000000001ktu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:58 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 1bb821d9-c01e-0046-5959-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161958Z-17fbfdc98bbx648l6xmxqcmf2000000007g0000000007m0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:58 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:58 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:58 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161958Z-r1755647c66dj7986akr8tvaw4000000093g00000000c475 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:58 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:58 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:58 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: ae8fe88e-901e-005b-2456-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161958Z-17fbfdc98bblptj7fr9s141cpc00000007k00000000050k7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:58 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:19:58 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:19:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:19:58 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 65345610-301e-0099-5492-1f6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161958Z-r1755647c66vrwbmeqw88hpesn00000009v00000000005eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:19:58 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1208, Parent PID: 3140

General

Target ID:	0
Start time:	12:18:33
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1016, Parent PID: 1208

General

Target ID:	2
Start time:	12:18:36
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2240,i,13872071653682687369,18138941728541842946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6284, Parent PID: 3140

General

Target ID:	3
Start time:	12:18:39
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.teachtravel.org/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.teachtravel.org/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1208, Parent PID: 3140

General

Chronological Activities

Analysis Process: chrome.exePID: 1016, Parent PID: 1208

General

Chronological Activities

Analysis Process: chrome.exePID: 6284, Parent PID: 3140

General

Chronological Activities

Disassembly

Windows Analysis Report
http://www.teachtravel.org/