Edit tour

Windows Analysis Report
http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7

Overview

General Information

Sample URL:	http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7
Analysis ID:	1541683
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,11453139151612805509,391983102231882730,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6284 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Hex3GXn2zfBT9Wc&MD=2BnorVbk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Hex3GXn2zfBT9Wc&MD=2BnorVbk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7 HTTP/1.1Host: peace4animals.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: peace4animals.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: peace4animals.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: peace4animals.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/2@6/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,11453139151612805509,391983102231882730,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,11453139151612805509,391983102231882730,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
peace4animals.net	173.231.203.241	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.74.196	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7	false		unknown
http://peace4animals.net/favicon.ico	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
173.231.203.241	peace4animals.net	United States	22611	IMH-WESTUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541683
Start date and time:	2024-10-25 01:55:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/2@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.186.142, 64.233.184.84, 34.104.35.123, 93.184.221.240, 40.69.42.241, 192.229.221.95, 13.85.23.206, 142.250.186.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1252
Entropy (8bit):	4.473635870451384
Encrypted:	false
SSDEEP:	24:lmlqlADyM91w31nd9QBHPUOzedXFgz6I5BsTEEEaPeC:4lCA+C16d9QBHPUPdX3I5cmC
MD5:	73432D98D2FDC996AB54405886D3C2FB
SHA1:	B885B6FB83B2C0369617C01548D6A8771DB55F33
SHA-256:	10C8050275A788952F68E6FF1AB42F63A6C1D2D0FD2C9CCAFE5F2964F980C78E
SHA-512:	CE4BC743F57EFA91327A2061D79637A22F81AF02DD17428C0D2CF0410A83D83BBB26FADCA093CFBC48CB93015096509E61CA50DF1911C58E225BD99387438B1B
Malicious:	false
Reputation:	low
URL:	http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7
Preview:	/* ======================================================================================================================================================.Share Box.====================================================================================================================================================== */...av-share-box{width:100%; clear:both; float:left; font-size: 13px; margin-top:30px; margin-bottom:-50px; padding:0;}..av-share-box .av-share-link-description{margin-bottom: 20px;}.#top .av-share-box ul{margin:0; padding:0; list-style-type: none; overflow: hidden; border-style: solid; border-width: 1px; display: table; width:100%; text-align: center; table-layout: fixed; border-radius: 3px; background: transparent; }..av-share-box ul li{margin:0; padding:0; display: table-cell; border-left-style: solid; border-left-width:1px;}..av-share-box ul li:first-child{border:none;}..av-share-box ul li a{ display:block; padding:15px 0; text-decoration: none; color: inherit; font-size:

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 01:56:17.378778934 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 01:56:19.834805965 CEST	49735	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:19.835299969 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:19.840147018 CEST	80	49735	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:19.840652943 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:19.840738058 CEST	49735	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:19.840935946 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:19.840935946 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:19.846223116 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:20.499934912 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:20.500041008 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:20.500122070 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:20.556946993 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:20.562333107 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:20.844826937 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:20.893891096 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:21.056603909 CEST	49739	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:21.062091112 CEST	80	49739	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:21.062172890 CEST	49739	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:21.062314987 CEST	49739	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:21.067898035 CEST	80	49739	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:21.722614050 CEST	80	49739	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:21.768557072 CEST	49739	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:22.258436918 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:22.258521080 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:22.258805037 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:22.266052961 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:22.266098022 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:22.497868061 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:22.497946024 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:22.498769045 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:22.500788927 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:22.500818014 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.124862909 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:23.125313044 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:23.125372887 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:23.127069950 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:23.127162933 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:23.128824949 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:23.128973007 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:23.175156116 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:23.175215006 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:23.222040892 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:23.365360975 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.365439892 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.369714022 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.369721889 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.370019913 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.411889076 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.422472954 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.467325926 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.666932106 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.667102098 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.667196035 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.667309046 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.667366982 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.667413950 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.667429924 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.727366924 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.727421045 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:23.727513075 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.727943897 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:23.727976084 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.566689968 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.568644047 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:24.568645000 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:24.568711042 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.569566965 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.570687056 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:24.615325928 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.811183929 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.811255932 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.811494112 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:24.812463045 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:24.812486887 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:24.812526941 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 01:56:24.812536001 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 01:56:25.748290062 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:25.748596907 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:26.207534075 CEST	49736	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:26.213154078 CEST	80	49736	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:26.760531902 CEST	80	49739	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:26.760627031 CEST	49739	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:28.214045048 CEST	49739	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:56:28.219477892 CEST	80	49739	173.231.203.241	192.168.2.4
Oct 25, 2024 01:56:30.165282011 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:30.165323973 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:30.166627884 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:30.166627884 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:30.166663885 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:31.000164032 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:31.000271082 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:31.003437996 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:31.003467083 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:31.003938913 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:31.050255060 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:31.873936892 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:31.919329882 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.144759893 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.144823074 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.144843102 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.144882917 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.144901991 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.144920111 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.144946098 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.144946098 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.145010948 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.145061970 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.145061970 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.145122051 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.145148039 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.145231962 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.145248890 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.145894051 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.146248102 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.989254951 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.989255905 CEST	49744	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:56:32.989322901 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:32.989355087 CEST	443	49744	20.109.210.53	192.168.2.4
Oct 25, 2024 01:56:33.129148006 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:33.129295111 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:56:33.129368067 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:34.208000898 CEST	49741	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:56:34.208065033 CEST	443	49741	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:04.846502066 CEST	49735	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:57:04.852999926 CEST	80	49735	173.231.203.241	192.168.2.4
Oct 25, 2024 01:57:09.245415926 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:09.245522022 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:09.245609045 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:09.245950937 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:09.245985985 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.062309027 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.062551022 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.068150043 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.068226099 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.068692923 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.084402084 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.127352953 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.351735115 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.351777077 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.351799965 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.351977110 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.351978064 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.352046967 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.352104902 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.468277931 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.468341112 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.468405008 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.468487978 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.468487978 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.468487978 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.468600988 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.468600988 CEST	49750	443	192.168.2.4	20.109.210.53
Oct 25, 2024 01:57:10.468646049 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:10.468677998 CEST	443	49750	20.109.210.53	192.168.2.4
Oct 25, 2024 01:57:12.334198952 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:12.334244013 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:12.334306002 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:12.334641933 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:12.334661961 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.064112902 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.064208031 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.066040039 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.066055059 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.066416025 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.074568987 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.115372896 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.294619083 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.294652939 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.294676065 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.294715881 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.294749022 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.294764996 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.294805050 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.316328049 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.316365004 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.316401005 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.316411018 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.316447973 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.316461086 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.410649061 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.410681963 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.410729885 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.410741091 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.410790920 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.410803080 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.431842089 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.431874037 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.431914091 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.431943893 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.431971073 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.432003021 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.433572054 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.433593035 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.433641911 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.433650970 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.433679104 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.433698893 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.435415030 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.435435057 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.435478926 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.435487032 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.435523987 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.435548067 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.527169943 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.527205944 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.527343035 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.527343035 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.527381897 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.527436018 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.547173023 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.547218084 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.547254086 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.547285080 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.547303915 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.547565937 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.548297882 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.548321009 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.548378944 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.548409939 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.548429012 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.548471928 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.549201012 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.549240112 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.549274921 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.549282074 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.549324036 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.549324036 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.550899029 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.550921917 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.550960064 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.550966978 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.550992966 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.551018000 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.551956892 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.551980019 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.552016973 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.552023888 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.552051067 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.552073002 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.553570032 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.553589106 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.553622961 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.553630114 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.553653955 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.553672075 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.642251968 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.642335892 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.642364979 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.642385006 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.642426014 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.642451048 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.642466068 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.642466068 CEST	49751	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.642476082 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.642486095 CEST	443	49751	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.695143938 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.695187092 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.695323944 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.695820093 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.695874929 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.695941925 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.696459055 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.696471930 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.696547031 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.696563959 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.696862936 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.696871042 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.697077990 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.697185993 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.697191954 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.697328091 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.697339058 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.697454929 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.697592974 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.697598934 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.698158026 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.698215008 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:13.698273897 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.698369026 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:13.698376894 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.425232887 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.426445007 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.426467896 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.427373886 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.427380085 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.429327011 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.429951906 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.429980040 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.431539059 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.431555033 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.432646990 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.432665110 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.433680058 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.433680058 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.433690071 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.433708906 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.434112072 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.434134960 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.435545921 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.435553074 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.444353104 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.444786072 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.444807053 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.447551966 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.447556973 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.553845882 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.554388046 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.555529118 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.555529118 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.555529118 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.556883097 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.556941986 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.557137966 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.557138920 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.557513952 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.558228016 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.558228016 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.558248043 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.558254957 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563041925 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563057899 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563065052 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563069105 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563184023 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563277006 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563277960 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563287020 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563446999 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563455105 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563530922 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563746929 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563786983 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563786983 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.563800097 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563817978 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563829899 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563958883 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.563985109 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.564284086 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.564300060 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.564300060 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.564317942 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.564333916 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.567024946 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.567054987 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.569070101 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.569097042 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.569392920 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.569392920 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.569442987 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.570782900 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.570874929 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.571127892 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.571127892 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.571202040 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.575582027 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.575642109 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.575804949 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.576133966 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.576133966 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.576421022 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.576426983 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.578583956 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.578646898 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.578836918 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.579543114 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.579565048 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:14.861985922 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:14.862009048 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.303433895 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.303576946 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.303917885 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.303972960 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.304013968 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.304094076 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.304119110 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.304399967 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.304411888 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.304542065 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.304547071 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.304739952 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.304754972 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.305049896 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.305053949 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.326349020 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.326694965 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.326714039 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.327147007 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.327153921 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.432271957 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.432435036 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.432492018 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.432919979 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.432921886 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.432940960 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.432950974 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.432956934 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.433119059 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.433172941 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.434174061 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.434242010 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.434303999 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.434746981 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.435981989 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.436000109 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.436810970 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.436820984 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.437300920 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.437330008 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.437339067 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.437354088 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.439593077 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.439618111 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.439630985 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.439637899 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.447726011 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.447753906 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.447801113 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.448972940 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.449007988 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.449062109 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.449415922 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.449430943 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.449892044 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.449909925 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.451376915 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.451456070 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.451529026 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.451829910 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.451858044 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.460629940 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.460690022 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.460737944 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.460964918 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.460978031 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.461005926 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.461013079 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.466324091 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.466403961 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.466480017 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.466800928 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.466836929 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.570347071 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.570610046 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.570674896 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.571047068 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.571068048 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.571104050 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.571116924 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.577332973 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.577370882 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:15.577430964 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.577697992 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:15.577723980 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.188558102 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.189047098 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.189363003 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.190057993 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.190078020 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.191133022 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.191138983 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.191142082 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.191194057 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.191740036 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.191751957 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.192454100 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.192454100 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.192528963 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.192570925 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.202816010 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.203393936 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.203466892 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.203970909 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.203984976 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.318886995 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.318958044 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.319466114 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.319576025 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.319576025 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.319607019 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.319643021 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.319658995 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.319662094 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.319730997 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.319762945 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.319914103 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.320751905 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.321162939 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.321175098 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.321249962 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.321254969 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.321289062 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.321327925 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.321363926 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.321379900 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.324338913 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.324338913 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.324392080 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.324414015 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.326131105 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.326212883 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.327197075 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.327245951 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.327280998 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.327482939 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.327706099 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.327737093 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.328490019 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.328495979 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.328521967 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.328532934 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.328704119 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.328704119 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.328738928 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.333942890 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.334160089 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.334341049 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.334386110 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.334386110 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.334410906 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.334434986 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.336353064 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.336380005 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.336558104 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.336558104 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.336584091 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.450504065 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.450651884 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.450833082 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.450833082 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.450833082 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.453335047 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.453367949 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.453607082 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.453607082 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.453640938 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:16.753633022 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:16.753686905 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.062479973 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.063668013 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.063685894 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.064088106 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.064944029 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.064954042 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.066014051 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.066039085 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.067074060 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.067080021 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.067867994 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.068552017 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.068558931 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.069478989 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.069483995 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.073309898 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.073848963 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.073908091 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.074912071 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.074927092 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.180517912 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.181552887 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.181566000 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.183037996 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.183043003 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.193083048 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.193296909 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.193347931 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.193607092 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.193624020 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.193633080 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.193639040 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.195338011 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.195553064 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.195593119 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.196660995 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.196676970 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.196892023 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.197065115 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.197110891 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.198625088 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.198631048 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.198652983 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.198656082 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.203130960 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.203197956 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.203246117 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.208614111 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.208645105 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.208702087 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.209052086 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.209064007 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.210280895 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.210299969 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.210313082 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.210319996 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.215745926 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.215831995 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.215909958 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.216101885 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.216136932 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.219796896 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.219806910 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.219867945 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.221555948 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.221580982 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.221710920 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.221898079 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.221910000 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.222588062 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.222611904 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.310256004 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.310409069 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.310467005 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.310662031 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.310684919 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.310699940 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.310708046 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.317564011 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.317588091 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.317646980 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.318403006 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.318418026 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.935949087 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.936443090 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.936461926 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.936985016 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.936989069 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.955969095 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.956327915 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.956404924 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.956721067 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.956733942 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.960455894 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.960874081 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.960880995 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:17.961405039 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:17.961410046 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.064964056 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.065339088 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.065609932 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.065823078 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.065834045 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.065844059 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.065848112 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.069053888 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.069101095 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.069144964 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.069554090 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.069628000 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.069649935 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.070434093 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.070446968 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.070786953 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.070804119 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.087877035 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.088057041 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.088195086 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.088195086 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.088387012 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.088418007 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.090056896 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.090205908 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.090363026 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.090478897 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.090478897 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.090487957 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.090496063 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.091190100 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.091244936 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.091594934 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.091814995 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.091841936 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.092504978 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.092547894 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.092722893 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.092722893 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.092780113 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.097950935 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.098721027 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.098757982 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.098906994 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.098912001 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.199672937 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.199825048 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.199970961 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.200671911 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.200691938 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.205588102 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.205607891 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.210027933 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.210845947 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.210860014 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.256846905 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.257011890 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.258233070 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.258455992 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.258498907 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.258558035 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.258574009 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.261214972 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.261235952 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.261425972 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.261425972 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.261452913 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.812130928 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.812695026 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.812733889 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.813293934 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.813301086 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.837745905 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.838725090 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.838725090 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.838747025 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.838766098 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.840198040 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.841005087 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.841005087 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.841048002 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.841062069 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.937525034 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.937936068 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.937944889 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.938404083 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.938409090 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.942684889 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.942895889 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.943310022 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.943370104 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.943370104 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.943393946 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.943407059 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.946161985 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.946187019 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.949845076 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.954051018 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.954067945 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.985747099 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.985908031 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.986104965 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.986104965 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.986104965 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.988017082 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.988117933 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.988259077 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.988373041 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.988373041 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.988394022 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.988404036 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.988972902 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.989016056 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.989250898 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.989250898 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.989300966 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.990648031 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.990684032 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:18.990864038 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.990909100 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:18.990915060 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.013602972 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.014013052 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.014029026 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.014455080 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.014461040 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.067598104 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.067765951 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.067825079 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.067903042 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.067914009 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.067923069 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.067928076 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.070866108 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.070900917 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.070960045 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.071108103 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.071116924 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.219394922 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.219486952 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.219559908 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.219780922 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.219805956 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.219820023 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.219826937 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.222738028 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.222775936 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.222841978 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.222995043 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.223012924 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.283741951 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.283754110 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.722069979 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.722558975 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.722574949 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.723036051 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.723041058 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.732048035 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.732383013 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.732407093 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.732928038 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.732933998 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.749166012 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.749502897 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.749531031 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.750010967 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.750017881 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.822783947 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.823307991 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.823338032 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.823857069 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.823862076 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.859172106 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.859366894 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.859421968 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.859651089 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.859671116 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.859678984 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.859685898 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.862129927 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.862171888 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.862257004 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.862689018 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.862701893 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.863177061 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.863245010 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.863296986 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.863419056 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.863435984 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.863446951 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.863451958 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.866302967 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.866386890 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.866480112 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.866643906 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.866677046 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.881854057 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.881999016 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.882069111 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.882170916 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.882170916 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.882213116 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.882240057 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.884783030 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.884794950 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.884852886 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.884994984 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.885004044 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.960664988 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.960722923 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.960793018 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.960935116 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.960949898 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.960961103 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.960967064 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.963403940 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.963443041 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.963515997 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.963687897 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.963709116 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.991467953 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.991967916 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.992022038 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:19.992528915 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:19.992542028 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.125231981 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.125394106 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.125536919 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.125536919 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.125626087 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.125660896 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.128231049 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.128273010 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.130019903 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.130321980 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.130337954 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.223705053 CEST	49735	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:57:20.229449987 CEST	80	49735	173.231.203.241	192.168.2.4
Oct 25, 2024 01:57:20.229574919 CEST	49735	80	192.168.2.4	173.231.203.241
Oct 25, 2024 01:57:20.620619059 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.621557951 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.621639967 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.621747971 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.621762037 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.621942043 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.622425079 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.622454882 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.622706890 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.622718096 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.656198025 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.657082081 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.657083035 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.657151937 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.657170057 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.697633028 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.698425055 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.698425055 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.698458910 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.698496103 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.752763033 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.752805948 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.753170013 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.753170967 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.753170967 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.754148960 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.754303932 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.754517078 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.754517078 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.754687071 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.754729033 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.756434917 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.756460905 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.756525040 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.756551981 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.756625891 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.756632090 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.756784916 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.756798983 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.756891012 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.756932974 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.789417028 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.789637089 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.789797068 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.789798021 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.789916039 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.789953947 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.791913986 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.791940928 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.792131901 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.792131901 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.792195082 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.847301006 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.847434044 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.847729921 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.847729921 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.848169088 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.848206997 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.854116917 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.854203939 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.854299068 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.854506016 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.854541063 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.868242979 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.869210958 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.869210958 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:20.869241953 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:20.869263887 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.065011978 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.065058947 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.502109051 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.502737999 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.502773046 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.503782988 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.503787041 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.505275011 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.505955935 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.506007910 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.507113934 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.507124901 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.533330917 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.543149948 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.543160915 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.544076920 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.544080973 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.561419964 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.561690092 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.561755896 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.562051058 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.562072992 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.562089920 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.562097073 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.564846039 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.564939022 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.565021038 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.565256119 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.565285921 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.593312979 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.593770981 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.593801022 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.595812082 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.595829010 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.636959076 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.637028933 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.637306929 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.637502909 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.637531996 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.639467955 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.639540911 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.639647961 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.640672922 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.640698910 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.640712976 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.640719891 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.645339966 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.645431042 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.645555973 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.649627924 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.649669886 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.649775028 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.650806904 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.650851965 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.651758909 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.651787996 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.675882101 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.675966978 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.676027060 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.676240921 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.676266909 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.680618048 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.680660963 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.680772066 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.681068897 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.681082964 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.728868008 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.729027033 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.729185104 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.729362011 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.729403973 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.729444981 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.729460001 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.733572960 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.733606100 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:21.733772993 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.734292030 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:21.734309912 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.275641918 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:22.275701046 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:22.275774956 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:22.276076078 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:22.276092052 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:22.333425999 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.334229946 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.334286928 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.335258961 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.335273027 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.396353006 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.401479959 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.401829958 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.401869059 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.402530909 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.402539015 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.402565956 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.402625084 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.403417110 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.403433084 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.414350986 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.414747000 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.414774895 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.415330887 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.415338039 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.470674038 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.470827103 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.470892906 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.470998049 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.470998049 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.471035957 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.471060038 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.472412109 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.472882986 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.472902060 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.473429918 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.473438025 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.474148035 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.474185944 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.474231958 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.474416018 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.474431992 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.530833006 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.530909061 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.531044960 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.531083107 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.531083107 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.531100988 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.531121016 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.533041000 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.533289909 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.533366919 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.533498049 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.533544064 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.533545017 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.533545017 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.533597946 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.533598900 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.533626080 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.533869028 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.533884048 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.535696030 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.535729885 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.535801888 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.535923004 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.535937071 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.545746088 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.545824051 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.545867920 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.545969009 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.545984030 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.545994043 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.545999050 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.548108101 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.548126936 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.548216105 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.548357964 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.548368931 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.603168011 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.603306055 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.603423119 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.603477955 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.603507042 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.603533030 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.603543997 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.606333017 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.606362104 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:22.606492043 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.606654882 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:22.606669903 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.125272989 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:23.125843048 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:23.125870943 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:23.127002001 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:23.127594948 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:23.127774954 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:23.175182104 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:23.216644049 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.217726946 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.217762947 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.218712091 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.218719006 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.259839058 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.262466908 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.262502909 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.263571024 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.263581038 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.278904915 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.280077934 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.280095100 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.280989885 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.280998945 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.284271955 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.285161972 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.285192013 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.285557985 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.285569906 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.345738888 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.345889091 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.346015930 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.346261978 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.346261978 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.346287012 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.346299887 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.351423979 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.351465940 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.351614952 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.351888895 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.351896048 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.356420994 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.356935978 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.356966019 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.357439041 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.357451916 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.388056040 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.388144970 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.388252020 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.388655901 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.388676882 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.388700008 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.388709068 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.393240929 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.393276930 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.393573046 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.393760920 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.393771887 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.408255100 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.408339977 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.408425093 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.408786058 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.408799887 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.408812046 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.408818960 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.413077116 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.413129091 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.413604021 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.413849115 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.413867950 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.416810989 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.416932106 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.417028904 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.417259932 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.417274952 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.417289972 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.417298079 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.420269012 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.420290947 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.420371056 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.420705080 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.420717001 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.490392923 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.490753889 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.490839958 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.491128922 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.491169930 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.491209030 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.491225004 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.495491982 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.495537043 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:23.495685101 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.496149063 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:23.496177912 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.091357946 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.091892958 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.091909885 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.092500925 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.092529058 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.136949062 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.137501955 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.137535095 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.138024092 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.138031006 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.192420959 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.192869902 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.192902088 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.193566084 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.193572998 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.204210997 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.204572916 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.204598904 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.204984903 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.204992056 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.222518921 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.222748995 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.222806931 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.222881079 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.222898960 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.222912073 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.222918987 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.225912094 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.225953102 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.226016045 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.226203918 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.226218939 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.232139111 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.232496023 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.232525110 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.232997894 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.233019114 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.268738985 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.268897057 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.268954992 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.269737959 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.269762039 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.269778013 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.269783974 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.274056911 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.274095058 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.274157047 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.274379969 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.274390936 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.328516006 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.328597069 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.328648090 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.328897953 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.328915119 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.328929901 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.328936100 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.331887960 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.331939936 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.331996918 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.332565069 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.332581997 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.343199968 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.343456984 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.343504906 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.343533039 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.343555927 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.343573093 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.343594074 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.345835924 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.345927000 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.346000910 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.346141100 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.346170902 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.361428022 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.361519098 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.361579895 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.361741066 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.361756086 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.361766100 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.361771107 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.364309072 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.364351034 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:24.364412069 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.364561081 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:24.364573002 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.010586023 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.011425972 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.011451960 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.012306929 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.012320995 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.054307938 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.055279970 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.055327892 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.055861950 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.055870056 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.076963902 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.077511072 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.077553034 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.079545021 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.079554081 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.087594986 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.090687037 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.090687037 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.090720892 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.090748072 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.111748934 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.113423109 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.113445997 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.114099026 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.114104033 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.139566898 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.140255928 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.140408993 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.140829086 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.140829086 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.140847921 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.140860081 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.146274090 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.146323919 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.146476030 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.147550106 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.147566080 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.203481913 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.203569889 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.203802109 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.204118967 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.204118967 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.204145908 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.204154015 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.207144022 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.207326889 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.207597017 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.207951069 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.207950115 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.207967043 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.207989931 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.207993031 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.207997084 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.208144903 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.210577011 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.210591078 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.210593939 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.210684061 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.211728096 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.211728096 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.211802006 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.219417095 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.219573975 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.219924927 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.219980001 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.219980001 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.219988108 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.219999075 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.223901987 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.223942041 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.226377964 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.226377964 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.226412058 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.247064114 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.247188091 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.249726057 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.255309105 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.255309105 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.255336046 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.255346060 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.258575916 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.258620977 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.258743048 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.265605927 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.265649080 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.868976116 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.870203972 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.870234013 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.871268034 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.871277094 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.951931000 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.952867985 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.952868938 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.952924013 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.952966928 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.953850985 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.954664946 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.954664946 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.954706907 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.954725981 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.993278980 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.994637012 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.995269060 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.995347023 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.996110916 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.996113062 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.996129990 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.996134043 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:25.997447968 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:25.997462988 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.004174948 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.004261971 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.004431963 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.004618883 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.004618883 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.004637957 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.004648924 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.006876945 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.006942034 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.007060051 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.007200956 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.007225037 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106307983 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106525898 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106611967 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106626034 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106662989 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.106689930 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.106759071 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.106781960 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.106790066 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106801033 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106806993 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.106815100 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.106816053 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.106822968 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.109508038 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.109555006 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.109683037 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.109730959 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.109736919 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.109792948 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.109828949 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.109841108 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.109920979 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.109935999 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.124448061 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.124640942 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.124671936 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.124727011 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.124788046 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.124788046 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.124818087 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.124841928 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.125087023 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.125143051 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.125168085 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.125181913 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.125195026 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.125200987 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.127270937 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.127298117 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.127451897 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.127531052 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.127537966 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.127561092 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.127599001 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.127665997 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.127762079 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.127774000 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.777575970 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.778182030 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.778217077 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.778651953 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.778665066 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.838752985 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.839332104 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.839349031 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.839795113 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.839801073 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.854489088 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.855041981 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.855086088 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.855446100 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.855458975 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.857873917 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.858211994 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.858236074 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.858535051 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.858541012 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.869868040 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.870253086 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.870270967 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.870769978 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.870775938 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.914804935 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.915100098 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.915170908 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.915241003 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.915241003 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.915268898 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.915296078 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.918092012 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.918121099 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.918185949 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.918318987 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.918329954 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.968758106 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.968838930 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.968894005 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.969111919 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.969131947 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.969141960 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.969147921 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.971988916 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.972029924 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.972104073 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.972425938 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.972443104 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.985498905 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.985629082 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.985683918 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.985718012 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.985718012 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.985737085 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.985748053 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.989326954 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.989366055 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.989424944 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.989593983 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.989607096 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.998518944 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.998589993 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.998636961 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.998747110 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.998755932 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:26.998769045 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:26.998775959 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.001220942 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.001236916 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.001297951 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.001425028 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.001436949 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.001905918 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.002439022 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.002505064 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.002532005 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.002551079 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.002561092 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.002576113 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.005417109 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.005506039 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.005573988 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.005686045 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.005707026 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.660094976 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.660662889 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.660679102 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.661101103 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.661107063 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.716573000 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.717144012 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.717221022 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.717653990 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.717669964 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.731710911 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.732176065 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.732203007 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.732578993 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.732590914 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.780577898 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.781027079 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.781045914 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.781375885 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.781380892 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.789772987 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.789913893 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.790016890 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.790056944 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.790074110 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.790086031 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.790092945 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.792726040 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.792783022 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.792848110 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.792989969 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.793004990 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.848946095 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.848969936 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.849039078 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.849037886 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.849092007 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.849334002 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.849380016 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.849410057 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.849426031 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.852217913 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.852328062 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.852413893 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.852576971 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.852617025 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.862039089 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.862343073 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.862517118 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.862550974 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.863157034 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.863171101 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.870088100 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.870160103 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.870208979 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.870224953 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.870239973 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.870248079 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.872647047 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.872674942 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.872766972 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.872893095 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.872905016 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.916795969 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.916851997 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.916970968 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.917047977 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.917125940 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.917181015 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.917205095 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.917218924 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.917222977 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.919888973 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.919931889 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:27.920099020 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.920253038 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:27.920269966 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.000622034 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.000691891 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.000775099 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.000899076 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.000948906 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.000981092 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.000997066 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.003420115 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.003516912 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.003596067 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.003772020 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.003809929 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.646680117 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.647105932 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.647845984 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.647845984 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.647883892 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.647902012 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.648268938 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.648328066 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.648673058 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.648685932 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.650361061 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.650973082 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.650986910 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.651215076 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.651221037 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.651906967 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.652250051 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.652272940 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.652638912 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.652646065 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.746073961 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.746613026 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.746700048 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.747227907 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.747265100 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.775419950 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.775573969 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.775697947 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.775765896 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.775765896 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.775809050 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.775835037 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.775950909 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.776109934 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.776288986 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.776288986 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.776288986 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.778424978 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.778480053 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.778646946 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.778738022 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.778783083 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.778783083 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.778851986 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.778889894 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.778889894 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.778978109 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.781476974 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.781533957 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.781693935 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.781699896 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.781802893 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.781802893 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.781829119 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.781850100 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.783163071 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.783188105 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.783282042 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.783328056 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.783432961 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.783432961 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.783484936 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.783524990 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.785541058 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.785548925 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.785564899 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.785598040 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.785686970 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.785693884 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.785836935 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.785842896 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.785851955 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.785880089 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.886646986 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.887681007 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.887866020 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.887866974 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.888094902 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.888118982 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.889981031 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.890036106 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:28.890161991 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.890310049 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:28.890331030 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.087358952 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.087409019 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.507116079 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.508425951 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.508460999 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.509907007 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.509915113 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.525321007 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.525866032 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.525927067 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.526766062 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.526779890 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.526832104 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.527271032 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.527297020 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.528228998 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.528235912 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.533970118 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.534782887 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.534811020 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.536232948 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.536242962 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.631433010 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.632123947 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.632184982 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.632793903 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.632807016 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.636271000 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.636425018 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.636490107 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.636801958 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.636835098 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.636920929 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.636935949 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.642724991 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.642774105 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.642848015 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.643074036 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.643086910 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.656737089 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.656816006 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.656894922 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.657350063 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.657350063 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.657396078 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.657424927 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.658776999 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.658952951 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.659032106 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.662324905 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.662410021 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.662484884 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.662826061 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.662858009 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.663077116 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.663085938 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.667220116 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.667354107 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.667414904 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.667917013 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.667975903 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.668045044 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.668737888 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.668766022 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.668792009 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.668808937 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.673326015 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.673341990 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.673393011 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.673713923 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.673727036 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.674012899 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.674026012 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.763544083 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.763600111 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.763659954 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.764256001 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.764271975 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.794384003 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.794409037 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:29.794543982 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.794821978 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:29.794831991 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.396095991 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.396142006 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.396878958 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.396925926 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.396953106 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.397011995 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.397572041 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.397591114 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.397699118 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.397710085 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.407064915 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.407474995 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.407506943 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.408008099 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.408015013 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.416676044 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.417165041 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.417192936 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.417697906 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.417705059 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.519682884 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.520318031 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.520349026 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.520960093 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.520967007 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.525764942 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.525924921 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.526043892 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.526104927 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.526130915 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.526146889 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.526154995 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.529092073 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.529264927 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.529345989 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.529510975 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.529551983 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.529586077 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.529602051 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.529910088 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.529948950 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.530028105 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.530203104 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.530220032 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.534647942 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.534687042 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.534761906 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.534913063 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.534931898 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.537769079 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.537841082 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.537945986 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.538022041 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.538367033 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.538398027 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.538429976 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.538444042 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.543922901 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.543936968 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.544054985 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.544225931 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.544236898 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.546865940 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.547068119 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.547149897 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.549068928 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.549098969 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.563234091 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.563256025 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.563345909 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.563761950 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.563774109 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.647757053 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.647835970 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.647897005 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.647923946 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.647964954 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.648015022 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.648099899 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.648113012 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.648124933 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.648132086 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.652951956 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.653043032 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:30.653142929 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.653748989 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:30.653779984 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.270665884 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.272027016 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.272054911 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.273102045 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.273107052 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.291445971 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.292613983 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.292643070 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.294101954 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.294109106 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.300134897 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.300558090 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.300585032 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.301390886 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.301397085 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.313508034 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.314644098 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.314655066 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.315853119 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.315857887 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.390899897 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.401365995 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.401518106 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.401598930 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.422035933 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.422101021 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.422233105 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.422293901 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.437438011 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.437535048 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.437599897 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.437674999 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.450104952 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.450259924 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.450335026 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.544065952 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.544130087 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.545030117 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.545042992 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.545361042 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.545397997 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.545639038 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.545663118 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.549108982 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.549115896 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.549159050 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.549165964 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.552339077 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.552352905 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.552366972 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.552372932 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.575505972 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.575546980 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.575679064 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.576065063 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.576075077 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.578681946 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.578758955 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.579097986 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.579215050 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.579246998 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.582834959 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.582845926 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.582958937 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.584681988 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.584688902 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.584875107 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.585732937 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.585742950 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.585961103 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.585972071 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.670943022 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.671178102 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.671276093 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.671714067 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.671758890 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.677166939 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.677218914 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:31.677373886 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.677953959 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:31.677988052 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.301577091 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.302460909 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.302524090 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.303426027 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.303447962 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.313848019 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.314640999 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.314678907 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.315675020 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.315682888 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.317749977 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.318314075 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.318331957 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.319399118 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.319405079 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.322170973 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.322972059 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.322983027 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.323586941 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.323594093 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.427042961 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.427864075 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.427884102 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.428682089 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.428687096 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.430694103 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.430841923 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.430893898 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.431413889 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.431431055 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.431447983 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.431453943 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.434736967 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.434763908 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.435020924 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.435329914 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.435338020 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.442827940 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.442977905 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.443033934 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.443243027 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.443254948 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.443281889 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.443286896 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.447079897 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.447103024 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.447493076 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.447768927 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.447850943 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.448131084 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.448236942 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.448245049 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.448275089 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.448286057 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.451632023 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.452125072 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.452168941 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.452169895 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.452209949 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.452965021 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.452992916 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.453144073 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.453665972 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.453681946 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.453780890 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.453787088 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.453834057 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.453836918 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.456682920 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.456716061 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.456784964 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.457052946 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.457065105 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.560132027 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.560204029 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.560342073 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.560358047 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.560764074 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.560770035 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.560895920 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.561141014 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.565256119 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.565291882 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:32.565495968 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.565752029 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:32.565772057 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.157387018 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:33.157552004 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:33.157603025 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:33.185627937 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.186480045 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.186533928 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.187906981 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.187922955 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.202393055 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.205245018 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.205259085 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.208456993 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.208467960 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.230475903 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.231573105 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.231595039 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.233021021 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.233025074 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.239007950 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.239928007 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.239988089 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.241142035 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.241154909 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.316641092 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.316802979 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.316868067 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.317616940 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.317656040 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.317683935 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.317698956 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.318671942 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.321579933 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.321593046 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.323271036 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.323280096 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.329421997 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.329463005 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.329516888 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.330024958 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.330039024 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.336616993 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.336802959 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.336853027 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.337244987 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.337260962 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.337270975 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.337276936 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.344974041 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.345014095 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.345068932 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.345966101 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.345980883 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.365231037 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.365257978 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.365293026 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.365297079 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.365336895 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.365818977 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.365828037 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.365839005 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.365844011 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.371875048 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.371917009 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.371974945 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.372304916 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.372322083 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.374201059 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.374357939 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.374411106 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.374522924 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.374563932 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.374605894 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.374622107 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.379302025 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.379338980 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.379395008 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.379563093 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.379584074 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.451481104 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.451642990 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.451699018 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.451745987 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.451762915 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.451773882 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.451780081 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.455421925 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.455478907 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:33.455601931 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.455739975 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:33.455756903 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.052170038 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.053287029 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.053287029 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.053320885 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.053325891 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.094232082 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.095323086 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.095323086 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.095351934 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.095362902 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.102336884 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.103113890 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.103115082 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.103193045 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.103236914 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.141560078 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.141997099 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.142020941 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.142388105 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.142395973 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.180552959 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.180613995 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.180851936 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.180851936 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.181221962 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.181238890 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.183764935 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.183854103 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.184036016 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.184098959 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.184117079 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.194485903 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.195405006 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.195405006 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.195445061 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.195482969 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.220422983 CEST	49802	443	192.168.2.4	142.250.74.196
Oct 25, 2024 01:57:34.220432043 CEST	443	49802	142.250.74.196	192.168.2.4
Oct 25, 2024 01:57:34.226140976 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.226233959 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.226453066 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.226453066 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.226548910 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.226561069 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.229243994 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.229331970 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.229552031 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.229552031 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.229624987 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.234652042 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.234688044 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.234729052 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.234905958 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.234906912 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.235070944 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.235100031 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.237365007 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.237432003 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.237629890 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.237631083 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.237699032 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.274801970 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.274893999 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.275125027 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.275125027 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.275125027 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.277673006 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.277724028 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.277916908 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.277916908 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.277957916 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.323883057 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.324045897 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.324213028 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.324213028 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.324255943 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.324276924 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.326904058 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.326946020 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.327147007 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.327176094 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.327186108 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.578277111 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.578310966 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.933640003 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.934740067 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.934741020 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.934765100 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.934781075 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.969434023 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.970398903 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.970398903 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.970427036 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.970448017 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.987186909 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.987562895 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.987585068 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:34.988085985 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:34.988099098 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.063817024 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.064296007 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.064320087 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.064860106 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.064867020 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.067763090 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.067846060 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.067960978 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.068039894 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.068079948 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.068104029 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.068121910 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.070804119 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.070848942 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.070909977 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.071074009 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.071088076 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.072623014 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.072922945 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.072952032 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.073256016 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.073268890 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.101263046 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.101289034 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.101330042 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.101392031 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.101592064 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.101610899 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.101624966 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.101629972 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.103853941 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.103893995 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.103974104 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.104146004 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.104165077 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.123408079 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.123492956 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.123557091 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.123615980 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.123616934 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.123637915 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.123658895 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.125921011 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.125955105 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.126013994 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.126188040 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.126204967 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.205080032 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.205172062 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.205328941 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.205367088 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.205389977 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.205403090 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.205410957 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.208058119 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.208091974 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.208241940 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.208416939 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.208431959 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.210541964 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.210716009 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.210797071 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.210850954 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.210860968 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.210886955 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.210891962 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.212654114 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.212702990 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.212764025 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.212884903 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.212897062 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.809197903 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.809726954 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.809753895 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.810209036 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.810214996 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.830467939 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.830941916 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.830965042 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.831624031 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.831629038 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.857016087 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.857412100 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.857436895 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.858232021 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.858237982 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.938266993 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.938338995 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.938469887 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.938534021 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.938565016 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.938711882 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.938730955 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.938743114 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.938747883 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.941426992 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.941481113 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.941540003 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.941675901 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.941690922 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.942001104 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.942290068 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.942564964 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.942574024 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.942573071 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.942604065 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.943046093 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.943053961 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.943221092 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.943226099 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.961044073 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.961110115 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.961206913 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.961255074 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.961267948 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.961292028 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.961297035 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.963711023 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.963754892 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.963831902 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.963963032 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.963999987 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.987446070 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.987467051 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.987510920 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.987513065 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.987653017 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.987698078 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.987715006 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.987728119 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.987732887 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.990052938 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.990076065 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:35.990139008 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.990253925 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:35.990263939 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.071862936 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.072040081 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.072149992 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.072149992 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.072263956 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.072304964 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.073381901 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.073407888 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.073456049 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.073504925 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.073702097 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.073702097 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.074085951 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.074099064 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.074116945 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.074137926 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.074512005 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.074512005 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.074533939 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.075901031 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.075932980 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.076123953 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.076123953 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.076152086 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.679280043 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.679840088 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.679871082 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.680130959 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.680135965 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.685218096 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.686146975 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.686146975 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.686208963 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.686259985 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.733335972 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.734210968 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.734210968 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.734241009 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.734256983 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.803122997 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.803551912 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.803569078 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.803956985 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.803961039 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.804914951 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.805660009 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.805660963 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.805681944 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.805691957 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.808574915 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.808764935 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.808867931 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.808867931 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.808921099 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.808934927 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.811508894 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.811538935 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.811621904 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.811714888 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.811721087 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.813894987 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.813920975 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.813982964 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.814014912 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.814120054 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.814237118 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.814237118 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.814277887 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.814302921 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.816620111 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.816658974 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.816800117 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.816912889 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.816927910 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.864921093 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.865044117 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.865187883 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.865187883 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.865331888 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.865346909 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.867233038 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.867269993 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.867429018 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.867429018 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.867456913 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.930661917 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.930829048 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.930938959 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.930938959 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.931124926 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.931137085 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.933046103 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.933072090 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.933433056 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.933433056 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.933461905 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.935777903 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.935811043 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.935857058 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.935887098 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.935992956 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.935992956 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.936007023 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.936033964 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.936038971 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.937951088 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.937973022 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:36.938119888 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.938119888 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:36.938136101 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.539752007 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.540326118 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.540348053 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.541098118 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.541105986 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.552247047 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.552886963 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.552901983 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.553359032 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.553364038 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.611182928 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.611609936 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.611620903 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.612045050 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.612050056 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.658976078 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.659370899 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.659384966 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.659768105 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.659771919 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.669058084 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.669142008 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.669416904 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.669568062 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.669589996 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.669603109 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.669611931 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.673391104 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.673443079 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.673497915 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.673779964 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.673796892 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.683729887 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.683929920 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.684009075 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.684010029 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.684043884 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.684061050 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.684245110 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.684648037 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.684658051 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.685195923 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.685200930 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.686203003 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.686247110 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.686314106 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.686429024 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.686444044 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.743197918 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.743242979 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.743280888 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.743292093 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.743304968 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.743349075 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.743489027 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.743503094 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.743513107 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.743518114 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.745418072 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.745440006 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.745537996 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.745659113 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.745672941 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.788013935 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.788042068 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.788086891 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.788094997 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.788108110 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.788146973 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.788284063 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.788288116 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.791387081 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.791407108 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.791495085 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.791876078 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.791889906 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.909976006 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.910151005 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.910222054 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.928565025 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.928565025 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.928589106 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.928602934 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.938293934 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.938332081 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:37.938383102 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.938585043 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:37.938600063 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.407100916 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.408201933 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.408201933 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.408235073 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.408250093 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.419616938 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.420147896 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.420171022 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.420625925 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.420634031 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.487507105 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.487931013 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.487952948 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.488528013 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.488533020 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.536315918 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.536900997 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.536927938 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.537333965 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.537338972 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.537724972 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.537789106 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.538048983 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.538048983 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.538079023 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.538094997 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.540918112 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.541002989 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.541238070 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.541238070 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.541315079 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.547925949 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.548204899 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.548326969 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.548326969 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.548358917 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.548369884 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.550409079 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.550451040 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.550559044 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.550620079 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.550628901 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.619048119 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.619138002 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.619337082 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.619337082 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.619505882 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.619524956 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.621782064 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.621871948 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.622041941 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.622122049 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.622139931 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.664015055 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.664488077 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.664516926 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.664928913 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.664932966 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.668925047 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.669122934 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.669172049 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.669204950 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.669265032 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.669265032 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.669334888 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.669348001 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.671506882 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.671545029 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.671746016 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.671746016 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.671776056 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.794554949 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.794769049 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.794837952 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.794924021 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.794945002 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.794981003 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.794986963 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.797223091 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.797277927 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:38.797414064 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.797487974 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:38.797497988 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.273087025 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.273637056 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.273660898 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.274157047 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.274163961 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.280950069 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.281646967 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.281671047 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.282012939 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.282021046 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.341670990 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.342552900 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.342552900 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.342578888 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.342600107 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.403568029 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.403637886 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.403685093 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.403779030 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.403846979 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.403846979 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.403865099 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.403876066 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.406894922 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.406924963 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.407049894 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.407208920 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.407217979 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.410685062 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.410844088 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.410938025 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.411020994 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.411087990 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.411087990 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.411087990 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.411101103 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.411102057 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.411109924 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.411593914 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.411598921 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.413384914 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.413420916 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.413505077 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.413626909 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.413645029 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.469764948 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.469841957 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.469996929 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.469996929 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.470069885 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.470103025 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.472342968 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.472382069 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.472462893 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.472659111 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.472670078 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.529902935 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.530792952 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.530792952 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.530822992 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.530836105 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.540103912 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.540265083 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.540339947 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.540766001 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.540781021 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.540832043 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.540838003 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.543185949 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.543217897 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.543344975 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.543490887 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.543507099 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.658623934 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.658777952 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.658936024 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.659003019 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.659003019 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.659022093 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.659034014 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.661746025 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.661780119 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 01:57:39.661956072 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.662058115 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 01:57:39.662067890 CEST	443	49902	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 01:56:17.750601053 CEST	53	58241	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:17.756094933 CEST	53	53494	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:19.016047955 CEST	53	49983	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:19.526705027 CEST	49217	53	192.168.2.4	1.1.1.1
Oct 25, 2024 01:56:19.526833057 CEST	54243	53	192.168.2.4	1.1.1.1
Oct 25, 2024 01:56:19.708663940 CEST	53	49217	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:19.834178925 CEST	53	54243	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:20.852447033 CEST	50689	53	192.168.2.4	1.1.1.1
Oct 25, 2024 01:56:20.852612972 CEST	56692	53	192.168.2.4	1.1.1.1
Oct 25, 2024 01:56:21.034625053 CEST	53	56692	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:21.056062937 CEST	53	50689	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:22.239036083 CEST	49936	53	192.168.2.4	1.1.1.1
Oct 25, 2024 01:56:22.239279985 CEST	53574	53	192.168.2.4	1.1.1.1
Oct 25, 2024 01:56:22.246383905 CEST	53	53574	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:22.246642113 CEST	53	49936	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:35.352621078 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 01:56:35.994412899 CEST	53	49529	1.1.1.1	192.168.2.4
Oct 25, 2024 01:56:55.080183983 CEST	53	56912	1.1.1.1	192.168.2.4
Oct 25, 2024 01:57:17.573405981 CEST	53	51878	1.1.1.1	192.168.2.4
Oct 25, 2024 01:57:17.584434986 CEST	53	52008	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 01:56:19.526705027 CEST	192.168.2.4	1.1.1.1	0x7d3d	Standard query (0)	peace4animals.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:56:19.526833057 CEST	192.168.2.4	1.1.1.1	0x24e4	Standard query (0)	peace4animals.net	65	IN (0x0001)	false
Oct 25, 2024 01:56:20.852447033 CEST	192.168.2.4	1.1.1.1	0x7420	Standard query (0)	peace4animals.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:56:20.852612972 CEST	192.168.2.4	1.1.1.1	0xa4c9	Standard query (0)	peace4animals.net	65	IN (0x0001)	false
Oct 25, 2024 01:56:22.239036083 CEST	192.168.2.4	1.1.1.1	0x5e36	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:56:22.239279985 CEST	192.168.2.4	1.1.1.1	0xe897	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 01:56:19.708663940 CEST	1.1.1.1	192.168.2.4	0x7d3d	No error (0)	peace4animals.net		173.231.203.241	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:56:21.056062937 CEST	1.1.1.1	192.168.2.4	0x7420	No error (0)	peace4animals.net		173.231.203.241	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:56:22.246383905 CEST	1.1.1.1	192.168.2.4	0xe897	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 01:56:22.246642113 CEST	1.1.1.1	192.168.2.4	0x5e36	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:56:33.403423071 CEST	1.1.1.1	192.168.2.4	0x5f4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:56:33.403423071 CEST	1.1.1.1	192.168.2.4	0x5f4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:56:51.090612888 CEST	1.1.1.1	192.168.2.4	0x69e7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:56:51.090612888 CEST	1.1.1.1	192.168.2.4	0x69e7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:57:10.188930988 CEST	1.1.1.1	192.168.2.4	0x7306	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:57:10.188930988 CEST	1.1.1.1	192.168.2.4	0x7306	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:57:12.333590984 CEST	1.1.1.1	192.168.2.4	0x8322	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:57:12.333590984 CEST	1.1.1.1	192.168.2.4	0x8322	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:57:30.930530071 CEST	1.1.1.1	192.168.2.4	0xd1f	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:57:30.930530071 CEST	1.1.1.1	192.168.2.4	0xd1f	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

peace4animals.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	173.231.203.241	80	3368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 01:56:19.840935946 CEST	535	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7 HTTP/1.1 Host: peace4animals.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 01:56:20.499934912 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:56:20 GMT Server: Apache Last-Modified: Thu, 08 Mar 2018 23:59:50 GMT Accept-Ranges: bytes Content-Length: 1252 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 68 61 72 65 20 42 6f 78 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2e 61 76 2d 73 68 61 72 65 2d 62 6f 78 7b 77 69 64 74 68 [TRUNCATED] Data Ascii: /* ======================================================================================================================================================Share Box====================================================================================================================================================== */.av-share-box{width:100%; clear:both; float:left; font-size: 13px; margin-top:30px; margin-bottom:-50px; padding:0;}.av-share-box .av-share-link-description{margin-bottom: 20px;}#top .av-share-box ul{margin:0; padding:0; list-style-type: none; overflow: hidden; border-style: solid; border-width: 1px; display: table; width:100%; text-align: center; table-layout: fixed; border-radius: 3px; background: transparent; }.av-share-box ul li{margin:0; padding:0; display: table-cell; border-left-style: solid; border-left-width:1px;}.av-share-box ul li:first-child{border:none;}.av-share-box ul li a{ display:block; padding:15px 0; text-decoration: none; color: inherit; font
Oct 25, 2024 01:56:20.500041008 CEST	258	IN	Data Raw: 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d Data Ascii: -size: 14px; -webkit-transition: all 0.2s ease-in-out; transition: all 0.2s ease-in-out;}.av-share-box .avia-related-tooltip{width:150px;}.av-social-sharing-box .av-share-box{margin:0;}#top .av-social-sharing-box-minimal .av-share-box ul
Oct 25, 2024 01:56:20.556946993 CEST	481	OUT	GET /favicon.ico HTTP/1.1 Host: peace4animals.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 01:56:20.844826937 CEST	242	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:56:20 GMT Server: Apache Last-Modified: Mon, 15 May 2017 21:56:55 GMT Accept-Ranges: bytes Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/x-icon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	173.231.203.241	80	3368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 01:56:21.062314987 CEST	281	OUT	GET /favicon.ico HTTP/1.1 Host: peace4animals.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 01:56:21.722614050 CEST	243	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:56:21 GMT Server: Apache Last-Modified: Mon, 15 May 2017 21:56:55 GMT Accept-Ranges: bytes Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/x-icon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	173.231.203.241	80	3368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 01:57:04.846502066 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:56:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 23:56:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=233359 Date: Thu, 24 Oct 2024 23:56:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:56:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 23:56:24 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=233358 Date: Thu, 24 Oct 2024 23:56:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 23:56:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:56:31 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Hex3GXn2zfBT9Wc&MD=2BnorVbk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 23:56:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3bbefb26-822c-48e7-84c6-6bcacfef452a MS-RequestId: 942dbf4d-be78-4e8b-a096-5dadad2632c9 MS-CV: zYhgBl9SiEKLuXWJ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 23:56:31 GMT Connection: close Content-Length: 24490
2024-10-24 23:56:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 23:56:32 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:10 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Hex3GXn2zfBT9Wc&MD=2BnorVbk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 23:57:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: eae22881-feb6-4215-ab6c-70569638485a MS-RequestId: 885fe463-ac76-4fa2-bed1-57c3601b27d0 MS-CV: imrmYnVWlUiWaWhE.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 23:57:09 GMT Connection: close Content-Length: 30005
2024-10-24 23:57:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 23:57:10 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:13 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:13 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:13 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 44315f87-b01e-0070-2fac-251cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235713Z-17c5cb586f6hhlf5mrwgq3erx800000000s000000000cqcs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:13 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 23:57:13 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:14 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:14 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235714Z-16849878b784cpcc2dr9ch74ng00000008f000000000h6tr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:14 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:14 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:14 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:14 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235714Z-16849878b78p8hrf1se7fucxk800000000g000000000emsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:14 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:14 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:14 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:14 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235714Z-16849878b78smng4k6nq15r6s4000000014000000000vq4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:14 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:14 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:14 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235714Z-15b8d89586fzhrwgk23ex2bvhw00000002m0000000000zx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:14 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:14 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:14 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:14 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235714Z-15b8d89586fsx9lfqmgrbzpgmg0000000fc0000000008e45 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:14 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:15 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235715Z-17c5cb586f6hp4zfqskwhb6z3000000001t00000000060n7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:15 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235715Z-16849878b78s2lqfdex4tmpp7800000008bg00000000qch6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:15 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:15 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235715Z-16849878b785jrf8dn0d2rczaw00000000vg00000000hsuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:15 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:15 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:15 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235715Z-16849878b787wpl5wqkt5731b400000000fg000000001hc9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:15 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:15 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235715Z-16849878b78j5kdg3dndgqw0vg00000001g00000000079yv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:16 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235716Z-16849878b784cpcc2dr9ch74ng00000008dg00000000q8sz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:16 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235716Z-r197bdfb6b4ld6jc5asqwvvz0w00000002hg000000003qgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:16 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235716Z-16849878b78bcpfn2qf7sm6hsn000000017g00000000ught x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:16 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235716Z-15b8d89586f42m673h1quuee4s00000003t00000000097d9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:16 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235716Z-16849878b78j7llf5vkyvvcehs00000000xg000000001sv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7ae4e8d9-101e-005a-2134-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235717Z-r197bdfb6b4kkrkjudg185sarw00000002mg000000005aus x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235717Z-16849878b78lhh9t0fb3392enw000000088g00000000kn8q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:17 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fc173041-601e-0097-79ad-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235717Z-15b8d89586fnsf5zd126eyaetw00000000vg00000000c8s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:17 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235717Z-16849878b786wvrz321uz1cknn00000008ag00000000tnan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235717Z-16849878b78x6gn56mgecg60qc00000001dg00000000w5cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-15b8d89586fxdh48qknu9dqk2g00000003rg000000004ue4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-17c5cb586f6qk7x5scs1ghy2m400000001w0000000002rqc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:17 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9e6b2b63-d01e-008e-7443-26387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-17c5cb586f6qt228zy1nuwhy2g00000001tg00000000a2ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 630b92e5-101e-00a2-203d-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-17c5cb586f6qs7hge7b080kmr000000001p000000000dt8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:18 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-16849878b78k46f8kzwxznephs000000086g00000000sdez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:18 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-16849878b785dznd7xpawq9gcn000000010000000000vun3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:18 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-16849878b78q4pnrt955f8nkx800000008cg00000000336n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:18 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235718Z-16849878b787sbpl0sv29sm89s00000008e000000000pcrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:18 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 96e16e7c-301e-000c-53ef-25323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235719Z-17c5cb586f6mqlb7hyuq0z97g8000000021g000000005bgp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:19 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235719Z-16849878b78ngdnlw4w0762cms00000008gg00000000bdd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:19 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235719Z-15b8d89586f4zwgbgswvrvz4vs0000000110000000002vm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:19 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:19 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235719Z-16849878b786wvrz321uz1cknn00000008bg00000000q18t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:19 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235719Z-16849878b78s2lqfdex4tmpp7800000008h00000000027g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:19 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235719Z-16849878b78q4pnrt955f8nkx8000000087000000000rs7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:19 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:20 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: c1e5dbf7-401e-0029-2d43-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235720Z-17c5cb586f6f69jxsre6kx2wmc000000021000000000d64n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:20 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:20 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:20 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235720Z-16849878b785dznd7xpawq9gcn0000000150000000008xec x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:20 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:20 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235720Z-15b8d89586ffsjj9qb0gmb1stn00000003xg000000007474 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:20 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235720Z-r197bdfb6b4kkm84nqp5tf0pvs00000000ng00000000bdca x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:20 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:20 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235720Z-16849878b78fmrkt2ukpvh9wh400000008b000000000g9g8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:20 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:20 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: de733a63-101e-00a2-1415-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235721Z-17c5cb586f6qkkscezt8hb00a000000001wg000000007zby x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:21 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:21 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235721Z-16849878b78j5kdg3dndgqw0vg00000001dg00000000h1zq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:21 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:21 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:21 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235721Z-17c5cb586f6bzvl6c2dt6tbmm400000001tg000000006kau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:21 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:21 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:21 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235721Z-r197bdfb6b48pcqqxhenwd2uz800000000b00000000006b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:21 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:21 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:21 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235721Z-16849878b78k46f8kzwxznephs000000086g00000000sdpn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:21 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:22 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:22 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235722Z-17c5cb586f67hhlz1ecw6yxtp0000000023g00000000611m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 24724c44-d01e-002b-6428-2625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235722Z-15b8d89586fqj7k5h9gbd8vs9800000000tg00000000ed51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:22 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 352988b4-001e-0065-3a25-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235722Z-r197bdfb6b4bq7nf8mnywhn9e000000000s000000000dq82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:22 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235722Z-16849878b78rjhv97f3nhawr7s00000008cg00000000bumh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 97925bc6-b01e-0002-7e3b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235722Z-r197bdfb6b4kkrkjudg185sarw00000002mg000000005b1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:23 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e2c56d39-d01e-0066-36df-25ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235723Z-15b8d89586f8nxpt6ys645x5v000000000zg000000004n4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:23 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 03f0aa2d-d01e-007a-29f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235723Z-15b8d89586fbt6nf34bm5uw08n00000003hg00000000dkey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:23 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235723Z-17c5cb586f6f69jxsre6kx2wmc000000026g000000000405 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235723Z-16849878b78gvgmlcfru6nuc5400000008c000000000cw8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:23 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235723Z-16849878b784cpcc2dr9ch74ng00000008e000000000q815 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:24 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235724Z-r197bdfb6b42sc4ddemybqpm140000000qhg00000000b171 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:24 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:24 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235724Z-16849878b786wvrz321uz1cknn00000008d000000000gqz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:24 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:24 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:24 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235724Z-15b8d89586flspj6y6m5fk442w00000005e000000000d401 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:24 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:24 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:24 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235724Z-15b8d89586flspj6y6m5fk442w00000005d000000000gr7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:24 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235724Z-15b8d89586fcvr6p5956n5d0rc00000005m00000000074fn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7a3803bc-a01e-0021-4af4-24814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235725Z-15b8d89586f2hk28h0h6zye26c00000002900000000029nq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235725Z-16849878b78j7llf5vkyvvcehs00000000v000000000bcz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ab726c5d-b01e-0098-175a-26cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235725Z-17c5cb586f67hhlz1ecw6yxtp000000001zg00000000cwc1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235725Z-16849878b78fmrkt2ukpvh9wh400000008b000000000g9v0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:25 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235725Z-16849878b786vsxz21496wc2qn00000008k0000000006e8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:25 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235725Z-16849878b786vsxz21496wc2qn00000008kg000000004frc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 5441351c-201e-000c-2bf5-2479c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-r197bdfb6b429k2s6br3k49qn400000005y0000000002t8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235725Z-16849878b78lhh9t0fb3392enw000000087g00000000pyc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cfffa7b8-401e-0064-673b-2654af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-16849878b78p8hrf1se7fucxk800000000kg00000000ex55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:25 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 796b115c-001e-005a-3627-26c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-17c5cb586f6hp4zfqskwhb6z3000000001ng00000000e6a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:26 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: cfcfc7b9-001e-0065-0f5b-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-17c5cb586f6tzc2wdxudxz0zw8000000019000000000dfy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:26 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a90b7fa3-401e-005b-4246-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-15b8d89586fcvr6p5956n5d0rc00000005m00000000074k7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:26 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-16849878b7898p5f6vryaqvp5800000000fg000000009d8t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:26 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-16849878b785g992cz2s9gk35c00000008hg000000000mg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:26 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235726Z-16849878b78z5q7jpbgf6e9mcw00000008d000000000vs3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:27 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:27 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235727Z-16849878b78s2lqfdex4tmpp7800000008f000000000aame x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:27 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:27 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:27 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235727Z-16849878b78gvgmlcfru6nuc5400000008cg00000000bqpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:27 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:27 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:27 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 28e57d84-e01e-003c-4a46-26c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235727Z-r197bdfb6b4t7wszkhsu1pyev000000000qg00000000d0gg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:27 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:27 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:27 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235727Z-16849878b78j5kdg3dndgqw0vg00000001h0000000003wr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:27 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:27 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:27 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 218b1b25-701e-005c-4b21-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235727Z-17c5cb586f6tzc2wdxudxz0zw800000001a000000000dsu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:27 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:28 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:28 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9bebe7cf-201e-0033-1046-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235728Z-r197bdfb6b4tq6ldv3s2dcykm8000000029g00000000d426 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:28 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:28 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:28 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235728Z-16849878b786lft2mu9uftf3y40000000120000000005f52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:28 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:28 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:28 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: cd066ebd-401e-0035-394c-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235728Z-17c5cb586f6qk7x5scs1ghy2m400000001tg000000008yws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:28 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:28 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:28 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235728Z-15b8d89586fcvr6p5956n5d0rc00000005p0000000002umr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:28 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:28 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235728Z-15b8d89586fs9clcgrr6f2d6vg00000002eg000000003fx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:28 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:29 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:29 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235729Z-17c5cb586f6qt228zy1nuwhy2g00000001vg000000006842 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:29 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 12a0180a-401e-00a3-48f5-248b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235729Z-r197bdfb6b4ld6jc5asqwvvz0w00000002hg000000003rd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:29 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235729Z-16849878b785g992cz2s9gk35c00000008d000000000g4ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:29 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 90c23955-201e-0096-7520-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235729Z-r197bdfb6b4tq6ldv3s2dcykm8000000029000000000dn43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:29 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 14889e7f-701e-0053-13f2-253a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235729Z-16849878b78rjhv97f3nhawr7s00000008dg000000008g1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:30 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:30 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:30 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 2edde2c3-c01e-002b-176a-266e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235730Z-16849878b785g992cz2s9gk35c00000008dg00000000ew15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:30 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:30 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:30 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 18e0c3bd-301e-001f-11f3-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235730Z-17c5cb586f6tq56f8fz96wddtg00000001wg000000007t67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:30 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:30 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:30 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235730Z-16849878b785jrf8dn0d2rczaw00000000sg00000000wrga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:30 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:30 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:30 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 98d07b8f-f01e-0096-1a27-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235730Z-17c5cb586f677284pnx3kebuu400000001t0000000009qwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:30 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:30 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:30 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 7f6d22c4-101e-0046-21f0-2591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235730Z-15b8d89586f6nn8zb8x99wuenc00000000t0000000006zd3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:31 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235731Z-16849878b7898p5f6vryaqvp5800000000h000000000932h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:31 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:31 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8e7afceb-101e-007a-50f3-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235731Z-r197bdfb6b4lbgfqwkqbrm672s000000027g0000000070eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:31 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: f29ba936-801e-0047-2ef2-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235731Z-17c5cb586f6hp4zfqskwhb6z3000000001s0000000008x5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:31 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235731Z-16849878b787psctgubawhx7k8000000085g00000000pzse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:31 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:31 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 22d1952d-101e-007a-6d50-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235731Z-17c5cb586f6q4vmqk5qfzgptrg00000001yg00000000cfhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:32 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235732Z-16849878b78j7llf5vkyvvcehs00000000qg00000000v1f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:32 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 95bc9e17-201e-0051-77f2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235732Z-15b8d89586f8nxpt6ys645x5v000000000x0000000009h5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:32 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:32 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235732Z-16849878b78ngdnlw4w0762cms00000008fg00000000fdde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:32 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:32 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:32 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0c5aa6f6-c01e-000b-5d92-25e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235732Z-15b8d89586fx2hlt035xdehq580000000fg0000000001ggb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:32 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:32 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:32 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235732Z-16849878b78nx5sne3fztmu6xc00000000rg000000009s43 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:33 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:33 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235733Z-16849878b78p8hrf1se7fucxk800000000n000000000b5ag x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:33 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:33 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:33 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235733Z-16849878b78gvgmlcfru6nuc54000000089g00000000pvqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:33 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:33 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 41af9018-001e-0046-0956-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235733Z-17c5cb586f6qk7x5scs1ghy2m400000001pg00000000ff2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:33 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235733Z-16849878b78hz7zj8u0h2zng1400000008cg00000000uqvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:33 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235733Z-16849878b78c5zx4gw8tcga1b400000008c0000000004r90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235734Z-15b8d89586flspj6y6m5fk442w00000005n0000000000une x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235734Z-16849878b785dznd7xpawq9gcn000000015g000000007fas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a3259b44-001e-0065-2af2-240b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235734Z-r197bdfb6b4kq4j5t834fh90qn0000000bv00000000041v4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235734Z-17c5cb586f6w4xfwf11m3wvey000000001p000000000c5qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235734Z-16849878b78jfqwd1dsrhqg3aw00000008hg000000007e9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235734Z-16849878b78rjhv97f3nhawr7s00000008d0000000009cyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 8b787db3-c01e-0046-5018-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-r197bdfb6b4ld6jc5asqwvvz0w00000002kg000000000m43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:34 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-16849878b78ngdnlw4w0762cms00000008cg00000000t8zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:35 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-r197bdfb6b4g24ztpxkw4umce800000001b00000000045h2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:35 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-16849878b78jfqwd1dsrhqg3aw00000008dg00000000qp9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:35 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 4481152a-601e-0001-4b55-22faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-16849878b78rjhv97f3nhawr7s00000008d0000000009d0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:35 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-16849878b78p8hrf1se7fucxk800000000qg000000003crh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:35 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-16849878b78fmrkt2ukpvh9wh400000008ag00000000mr3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:35 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:35 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:35 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235735Z-16849878b78gvgmlcfru6nuc5400000008ag00000000kxb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:36 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:35 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 4fea8089-201e-0071-08f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235736Z-r197bdfb6b4t7wszkhsu1pyev000000000sg0000000072v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:36 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:36 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235736Z-16849878b78smng4k6nq15r6s4000000017000000000h9n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:36 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:36 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a1fd626a-d01e-0017-5dfc-24b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235736Z-15b8d89586frzkk2umu6w8qnt80000000f7g000000000q7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:36 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235736Z-16849878b78dsttbr1qw36rxs800000008e000000000dawa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:36 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:36 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235736Z-16849878b78jfqwd1dsrhqg3aw00000008kg000000004n52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:36 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:36 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:36 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4a3ae400-b01e-0001-38e4-2546e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235736Z-16849878b78nx5sne3fztmu6xc00000000rg000000009sdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:36 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:37 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:37 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 1fd9bb61-701e-003e-173a-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235737Z-16849878b78rjhv97f3nhawr7s00000008c000000000dvsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:37 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:37 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:37 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: f7b99165-401e-0035-1ce4-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235737Z-16849878b785jrf8dn0d2rczaw00000000sg00000000wrvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:37 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:37 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:37 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235737Z-16849878b785f8wh85a0w3ennn000000088g00000000tn5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:37 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:37 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:37 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: cf57a0a6-d01e-00a1-085a-2635b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235737Z-17c5cb586f67p8ffw0hbk5rahw00000001vg00000000cf0g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:37 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:37 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:37 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235737Z-16849878b78ngdnlw4w0762cms00000008mg000000001817 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:37 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:38 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:38 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 8111d5b4-601e-00ab-384d-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235738Z-r197bdfb6b4bq7nf8mnywhn9e000000000rg00000000f8du x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:38 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:38 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: b0947076-901e-0067-17f4-24b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235738Z-15b8d89586ff5l62aha9080wv0000000011g0000000048x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:38 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235738Z-16849878b78c5zx4gw8tcga1b4000000088000000000m0nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:38 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:38 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235738Z-16849878b78smng4k6nq15r6s4000000014g00000000u7vv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:38 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:38 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:38 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 12b50f8a-301e-0033-52f0-25fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235738Z-16849878b787wpl5wqkt5731b400000000dg000000001s52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:57:38 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:39 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:39 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 0ee1a661-001e-000b-6e0b-2215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235739Z-16849878b78nx5sne3fztmu6xc00000000q000000000eg7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:39 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:39 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:39 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c482efa8-801e-007b-0d3a-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235739Z-17c5cb586f6tq56f8fz96wddtg00000001wg000000007tmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:39 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:39 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:39 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bdc34fbf-001e-0017-613b-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235739Z-r197bdfb6b4gx6v9pg74w9f47s00000001g000000000byvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:39 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:39 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:39 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 33ceeaf1-201e-0085-51f2-2434e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235739Z-r197bdfb6b4kkrkjudg185sarw00000002g000000000egk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:39 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:39 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235739Z-16849878b78lhh9t0fb3392enw000000088g00000000kpss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:57:40 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:57:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:57:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b9c8d577-601e-0002-7dab-21a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T235740Z-16849878b785jsrm4477mv3ezn000000089000000000tc1v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:57:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2896, Parent PID: 1816

General

Target ID:	0
Start time:	19:56:12
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3368, Parent PID: 2896

General

Target ID:	2
Start time:	19:56:16
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,11453139151612805509,391983102231882730,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6284, Parent PID: 1816

General

Target ID:	3
Start time:	19:56:18
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2896, Parent PID: 1816

General

Chronological Activities

Analysis Process: chrome.exePID: 3368, Parent PID: 2896

General

Chronological Activities

Analysis Process: chrome.exePID: 6284, Parent PID: 1816

General

Chronological Activities

Disassembly

Windows Analysis Report
http://peace4animals.net/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.1.7