Edit tour

Windows Analysis Report
http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext

Overview

General Information

Sample URL:	http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext
Analysis ID:	1542352
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1824,i,7493179443349228738,16118877362667362041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://glsft2.my.salesforce.com/s.gif

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext HTTP/1.1Host: glsft2.my.salesforce.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s.gif HTTP/1.1Host: glsft2.my.salesforce.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=DAtLpZL-Ee-GZnMAWnwcaw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: glsft2.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://glsft2.my.salesforce.com/s.gifAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=DAtLpZL-Ee-GZnMAWnwcaw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: glsft2.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=DAtLpZL-Ee-GZnMAWnwcaw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext HTTP/1.1Host: glsft2.my.salesforce.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: glsft2.my.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/5@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1824,i,7493179443349228738,16118877362667362041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1824,i,7493179443349228738,16118877362667362041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
usa678.sfdc-lywfpd.salesforce.com	44.224.75.194	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
glsft2.my.salesforce.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://glsft2.my.salesforce.com/favicon.ico	false	unknown
http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext	false	unknown
https://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext	false	unknown
https://glsft2.my.salesforce.com/s.gif	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
44.224.75.194	usa678.sfdc-lywfpd.salesforce.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542352
Start date and time:	2024-10-25 20:21:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/5@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.57.18, 93.184.221.240, 172.217.23.99, 142.251.168.84, 142.250.186.174, 192.229.221.95, 34.104.35.123, 172.202.163.200, 13.85.23.206, 4.175.87.197, 13.95.31.18, 52.149.20.212, 142.250.185.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 39

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://glsft2.my.salesforce.com/s.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 40

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6916960685487825
Encrypted:	false
SSDEEP:	48:uZY/S81C1A58ZrvB0Ze/kPm3Cn8GaxOcBXmD:lSRu8ZrvBj/kuXG9
MD5:	CCDA8DF05E9A37B3131AFD4D451B44EC
SHA1:	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C
SHA-256:	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
SHA-512:	A91F53C07B327C35864FE903ACFE30AFE2DE3C26FDCE1BDBF65842598B3A7B2FB19E54DE27495519BF1E2A2BF7358561DA16E931324E5B1112DA4FE7EFE4BC7E
Malicious:	false
Reputation:	low
URL:	https://glsft2.my.salesforce.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... .....@........................................................................................................................................................................_..i..'............................................%..............I................................A.............................I................1.........................................3......}............................................'..u...............................................!...................................................s..........................................................................................'......I......................................1.....................................U..............................'..I..#..............................................................

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6916960685487825
Encrypted:	false
SSDEEP:	48:uZY/S81C1A58ZrvB0Ze/kPm3Cn8GaxOcBXmD:lSRu8ZrvBj/kuXG9
MD5:	CCDA8DF05E9A37B3131AFD4D451B44EC
SHA1:	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C
SHA-256:	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
SHA-512:	A91F53C07B327C35864FE903ACFE30AFE2DE3C26FDCE1BDBF65842598B3A7B2FB19E54DE27495519BF1E2A2BF7358561DA16E931324E5B1112DA4FE7EFE4BC7E
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... .....@........................................................................................................................................................................_..i..'............................................%..............I................................A.............................I................1.........................................3......}............................................'..u...............................................!...................................................s..........................................................................................'......I......................................1.....................................U..............................'..I..#..............................................................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 20:21:56.362735033 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:06.112627029 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:07.749737978 CEST	49737	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:07.750087023 CEST	49738	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:07.755158901 CEST	80	49737	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:07.755512953 CEST	80	49738	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:07.755538940 CEST	49737	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:07.755599976 CEST	49738	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:07.755806923 CEST	49737	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:07.761567116 CEST	80	49737	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:08.466029882 CEST	80	49737	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:08.488641977 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:08.488682032 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:08.488770008 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:08.488962889 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:08.488976002 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:08.520112991 CEST	49737	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.214407921 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.215421915 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.215441942 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.216459036 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.216526985 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.219355106 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.219409943 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.220067978 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.220077991 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.270486116 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.418329000 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.418399096 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.418447971 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.422631979 CEST	49740	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.422648907 CEST	443	49740	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.432013035 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.432075977 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:09.432147980 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.432523966 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:09.432544947 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.163697004 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.207609892 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.282310963 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.282352924 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.282934904 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.291259050 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.291379929 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.292036057 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.339371920 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.481878042 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.481978893 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.482115030 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.483335018 CEST	49743	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.483391047 CEST	443	49743	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.808131933 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:10.808161020 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:10.809770107 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:10.821362019 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:10.821372986 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:10.879812956 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.879868984 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:10.879956007 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.880970001 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:10.880985975 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.594901085 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.630321026 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.630378962 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.631817102 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.637326002 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.637546062 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.637562990 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.637610912 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.696929932 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:11.699457884 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:11.699482918 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:11.700530052 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:11.700587988 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:11.703093052 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:11.703159094 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:11.762217999 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:11.762245893 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:11.762343884 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:11.764883041 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:11.764898062 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:11.823441982 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.823540926 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.823570967 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.823622942 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.823635101 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.823764086 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.823815107 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.825812101 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:11.825826883 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:11.833261967 CEST	49745	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.833281040 CEST	443	49745	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.878072977 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.878108978 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.878158092 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.878839970 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:11.878853083 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:11.985358000 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:12.620292902 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:12.620392084 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:12.632834911 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.633326054 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.633347034 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.634782076 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.634843111 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.635235071 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.635303020 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.635588884 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.635597944 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.729417086 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:12.729439974 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:12.729861975 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:12.798742056 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:12.798758030 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.828059912 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.828119993 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.828140974 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.828185081 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.828211069 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.828239918 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.828515053 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:12.828572989 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.846390009 CEST	49747	443	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:12.846431017 CEST	443	49747	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:13.065208912 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:13.111330986 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:13.309216976 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:13.309298992 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:13.309354067 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:13.309598923 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:13.309614897 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:13.309624910 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:13.309629917 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:13.354042053 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:13.354114056 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:13.354202986 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:13.354774952 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:13.354799986 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.230554104 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.230664015 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:14.231888056 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:14.231940985 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.232841015 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.234000921 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:14.279355049 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.483189106 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.483345985 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.483412981 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:14.484044075 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:14.484080076 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:14.484107018 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 25, 2024 20:22:14.484123945 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 25, 2024 20:22:18.700625896 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:18.700674057 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 25, 2024 20:22:18.701906919 CEST	49749	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:18.702006102 CEST	443	49749	173.222.162.32	192.168.2.4
Oct 25, 2024 20:22:18.702140093 CEST	49749	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:18.734735966 CEST	49749	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:18.734770060 CEST	443	49749	173.222.162.32	192.168.2.4
Oct 25, 2024 20:22:19.621613979 CEST	443	49749	173.222.162.32	192.168.2.4
Oct 25, 2024 20:22:19.621715069 CEST	49749	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:22.446492910 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:22.446552992 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:22.446599960 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:22.505110025 CEST	49744	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:22:22.505140066 CEST	443	49744	142.250.186.164	192.168.2.4
Oct 25, 2024 20:22:39.110289097 CEST	443	49749	173.222.162.32	192.168.2.4
Oct 25, 2024 20:22:39.110380888 CEST	49749	443	192.168.2.4	173.222.162.32
Oct 25, 2024 20:22:52.769793987 CEST	49738	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:52.775886059 CEST	80	49738	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:53.471707106 CEST	49737	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:22:53.477446079 CEST	80	49737	44.224.75.194	192.168.2.4
Oct 25, 2024 20:22:57.851295948 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:57.851345062 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:57.851592064 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:57.851778030 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:57.851794004 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.599145889 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.599221945 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.601064920 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.601079941 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.601562977 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.611093998 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.655339956 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.827003002 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.827058077 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.827100992 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.827122927 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.827141047 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.827168941 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.827188969 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.857431889 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.857484102 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.857501030 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.857562065 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.857572079 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.857610941 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.944259882 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.944303036 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.944339991 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.944350958 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.944391966 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.973773003 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.973823071 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.973853111 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.973861933 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.973893881 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.973922014 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.977372885 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.977413893 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.977437973 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.977447033 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.977478981 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.977494955 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.978701115 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.978744030 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.978770018 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.978777885 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:58.978807926 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:58.978827953 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.062547922 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.062593937 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.062628984 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.062643051 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.062701941 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.090775967 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.090818882 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.090853930 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.090871096 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.090924025 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.092466116 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.092505932 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.092533112 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.092541933 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.092571020 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.092591047 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.095010042 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.095048904 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.095077038 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.095093012 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.095125914 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.095154047 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.178427935 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.178472042 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.178504944 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.178523064 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.178539038 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.178553104 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.206814051 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.206871033 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.206882954 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.206892014 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.206940889 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.208678007 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.208720922 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.208755970 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.208765030 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.208796978 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.208815098 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.208859921 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.208911896 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.208921909 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.209006071 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.209009886 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.209048033 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.209053040 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.209073067 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.209084034 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.209090948 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.256262064 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.256304979 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.256391048 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.256974936 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.256993055 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.260446072 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.260479927 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.260587931 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.260715008 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.260730028 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.261640072 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.261651039 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.261897087 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.262039900 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.262053013 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.264574051 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.264612913 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.264671087 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.265292883 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.265355110 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.265419960 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.265701056 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.265714884 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.265820980 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.265847921 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.997832060 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:22:59.998581886 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:22:59.998655081 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.000399113 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.000453949 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.000941038 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.002089024 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.002089024 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.002109051 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.002125978 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.006551027 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.007864952 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.008357048 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.008383036 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.009002924 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.009314060 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.009357929 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.009399891 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.009409904 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.010214090 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.010217905 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.010224104 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.010251045 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.012157917 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.012171984 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.130279064 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.130297899 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.130342007 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.130536079 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.131100893 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.131140947 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.131237030 CEST	49755	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.131253004 CEST	443	49755	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.136171103 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.136213064 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.139298916 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.139435053 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.139465094 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.139599085 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.139717102 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.139728069 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.140079021 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.140079021 CEST	49754	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.140096903 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.140105963 CEST	443	49754	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141113997 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141129971 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141160965 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141165972 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141271114 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.141271114 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.141417027 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.141417027 CEST	49753	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.141433001 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141454935 CEST	443	49753	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141781092 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.141974926 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.141974926 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.142096996 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.142122030 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.148947001 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.148983002 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.149193048 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.150044918 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.150135994 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.150446892 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.150726080 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.150763035 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.151870012 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.151933908 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.155920982 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.155950069 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.155992031 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.156225920 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.156256914 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.178819895 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.178833008 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.178908110 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.178925991 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.178951979 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.179224014 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.179224014 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.179239035 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.179249048 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.184684038 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.184732914 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.185296059 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.185560942 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.185586929 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.875351906 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.875864983 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.875884056 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.876405001 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.876411915 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.887054920 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.887564898 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.887577057 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.888006926 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.888011932 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.888756990 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.889153957 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.889218092 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.889683962 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.889699936 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.909166098 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.909806967 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.909849882 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.910387993 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.910401106 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.927453995 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.927788019 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.927808046 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:00.928308010 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:00.928319931 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.007781982 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.007818937 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.007895947 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.008131981 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.008131981 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.008152008 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.008160114 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.011676073 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.011735916 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.011826992 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.012032986 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.012063026 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.017170906 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.017668962 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.017762899 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.017800093 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.017839909 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.017872095 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.017889023 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.018105030 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.018229008 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.018287897 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.018343925 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.018387079 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.018413067 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.018429041 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.020750999 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.020778894 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.020925045 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.021015882 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.021033049 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.021084070 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.021102905 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.021167040 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.021250010 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.021261930 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.059746981 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.060043097 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.060102940 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.060148001 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.060148001 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.060170889 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.060190916 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.062285900 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.062300920 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.062397003 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.062633038 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.062648058 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.136902094 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.137054920 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.137234926 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.137319088 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.137319088 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.137360096 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.137392044 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.140738964 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.140758038 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.140835047 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.140969038 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.140980959 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.744349003 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.744975090 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.745050907 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.747896910 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.747919083 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.753154993 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.756577015 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.756584883 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.757036924 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.757041931 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.758491993 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.758930922 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.758944988 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:01.759937048 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:01.759943008 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.834295988 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.835225105 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.836529016 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.836611986 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.837193966 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.837204933 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.837524891 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.837569952 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.837609053 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.838150024 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.838155985 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.838342905 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.838381052 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.838505030 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.838639975 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.838697910 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.839143038 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.839154005 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.843836069 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.846168995 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.846177101 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.847862005 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.847867966 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.849102020 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.849102020 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.849117041 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.849121094 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.857362032 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.857399940 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.857449055 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.857850075 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.857863903 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.861485958 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.861525059 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.861589909 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.865189075 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.865204096 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.866391897 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.866403103 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:02.866451025 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.866959095 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:02.866971016 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.197596073 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.198000908 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.198096991 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.198741913 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.198741913 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.198755980 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.198769093 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.199742079 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.200721979 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.200784922 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.201930046 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.201937914 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.212241888 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.212280989 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.212373018 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.214463949 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.214514971 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.214624882 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.214935064 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.214966059 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:03.215626955 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:03.215641975 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.831876040 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.832365990 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.832531929 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.832552910 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.832892895 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.832906008 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.833314896 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.833318949 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.833450079 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.833456993 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.835169077 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.835490942 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.835550070 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.835891962 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.835905075 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.837454081 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.837867022 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.837898970 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.838238001 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.838248014 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.860174894 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.860557079 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.860583067 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.861113071 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.861119986 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.961766958 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.962209940 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.962266922 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.962328911 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.962351084 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.962362051 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.962368011 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.965863943 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.965950012 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.966037035 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.966173887 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.966211081 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.966248989 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.966335058 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.966407061 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.966443062 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.966463089 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.966475964 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.966484070 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.967250109 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.967519999 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.967585087 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.967600107 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.967605114 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.967618942 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.967622995 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.969203949 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.969242096 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.969297886 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.969415903 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.969427109 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.970160961 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.970185995 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.970251083 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.970388889 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.970412970 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.975212097 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.975704908 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.975753069 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.975810051 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.975815058 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.975830078 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.975841999 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.977624893 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.977680922 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.977751970 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.977885008 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.977910042 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.991811991 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.992007017 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.992063999 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.992091894 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.992105007 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.992114067 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.992120981 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.993967056 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.993990898 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:04.994041920 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.994177103 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:04.994189024 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.698477983 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.699620962 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.699620962 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.699682951 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.699706078 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.705513000 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.706249952 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.706249952 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.706268072 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.706285954 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.711463928 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.711858034 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.711919069 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.712202072 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.712215900 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.714030981 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.714750051 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.714750051 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.714786053 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.714813948 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.741584063 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.741950035 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.741978884 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.743911028 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.743921041 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.829458952 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.829621077 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.829771042 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.829821110 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.829821110 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.829848051 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.829875946 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.832777023 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.832861900 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.833070040 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.833275080 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.833314896 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.856478930 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.856524944 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.856745958 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.856746912 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.856770039 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.856810093 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.856831074 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.856837988 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.856967926 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.857208967 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.857230902 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.857387066 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.857394934 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.857657909 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.857796907 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.859472990 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859517097 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.859559059 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859559059 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859612942 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.859637976 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859638929 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859639883 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859654903 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.859675884 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.859770060 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859776020 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859792948 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.859852076 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.859879017 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.861521006 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.861543894 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.861630917 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.861727953 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.861738920 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.870111942 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.870253086 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.870342016 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.870342016 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.870439053 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.870449066 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.872234106 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.872256994 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:05.872354031 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.872504950 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:05.872529984 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.567066908 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.567661047 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.567727089 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.568345070 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.568358898 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.604609966 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.605355024 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.605381012 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.605910063 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.605916023 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.610482931 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.611073017 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.611090899 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.613795042 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.613801003 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.634804964 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.635390043 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.635423899 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.635884047 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.635895014 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.649496078 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.650010109 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.650023937 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.650504112 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.650515079 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.699457884 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.699613094 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.699799061 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.699887037 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.699887991 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.699929953 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.699960947 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.703090906 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.703162909 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.703329086 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.703481913 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.703516006 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.738909006 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.738969088 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.739026070 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.739204884 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.739224911 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.739233017 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.739239931 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.742145061 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.742240906 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.742319107 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.742490053 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.742527962 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.744911909 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.745065928 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.745120049 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.745316982 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.745332956 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.745347977 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.745354891 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.747575045 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.747606039 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.747742891 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.748044968 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.748070955 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.773091078 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.773155928 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.773255110 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.773410082 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.773410082 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.773433924 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.773458958 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.775765896 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.775816917 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.775904894 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.776061058 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.776081085 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.787760019 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.788356066 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.788453102 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.788515091 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.788515091 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.788533926 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.788554907 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.790813923 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.790836096 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:06.791004896 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.791165113 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:06.791177034 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.467398882 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.467971087 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.468017101 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.468456984 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.468471050 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.475027084 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.475361109 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.475403070 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.475752115 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.475759029 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.491607904 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.492022038 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.492039919 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.492413998 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.492425919 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.513999939 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.514374018 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.514431953 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.514738083 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.514753103 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.542577982 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.543023109 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.543036938 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.543410063 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.543414116 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.600367069 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.600400925 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.600572109 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.600739002 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.600739002 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.600769997 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.600784063 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.603725910 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.603754997 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.604057074 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.604190111 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.604204893 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.605128050 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.605232954 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.605307102 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.605391979 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.605436087 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.605475903 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.605493069 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.607623100 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.607641935 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.607770920 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.607897997 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.607912064 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.621066093 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.621344090 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.621413946 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.621534109 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.621567965 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.621598959 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.621612072 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.624105930 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.624114990 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.624320030 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.627904892 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.627917051 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.647792101 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.648746967 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.648879051 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.648879051 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.648952961 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.648974895 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.651921034 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.651951075 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.652219057 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.652219057 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.652290106 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.674763918 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.674922943 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.675118923 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.675165892 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.675165892 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.675178051 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.675185919 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.678608894 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.678646088 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:07.678921938 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.678922892 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:07.678956985 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.342124939 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.342854023 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.342866898 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.343622923 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.343626976 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.368041039 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.368541002 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.368552923 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.368988991 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.368993044 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.382994890 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.383553028 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.383568048 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.383835077 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.383838892 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.384905100 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.385526896 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.385526896 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.385555983 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.385590076 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.427552938 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.428013086 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.428065062 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.428397894 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.428414106 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.474575996 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.474828959 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.474984884 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.474984884 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.475044966 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.475054026 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.477942944 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.477957964 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.478219032 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.478264093 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.478269100 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.498588085 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.498764992 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.498969078 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.498969078 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.499334097 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.499340057 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.501985073 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.502080917 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.502296925 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.502437115 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.502469063 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.505508900 CEST	49738	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:23:08.511682987 CEST	80	49738	44.224.75.194	192.168.2.4
Oct 25, 2024 20:23:08.511800051 CEST	49738	80	192.168.2.4	44.224.75.194
Oct 25, 2024 20:23:08.516738892 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.516798973 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.517019033 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.517019033 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.517174959 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.517183065 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.519577980 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.519599915 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.519728899 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.519817114 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.519829988 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.522932053 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.523072958 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.523195982 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.523195982 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.523689032 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.523694038 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.525234938 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.525249004 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.525326967 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.525433064 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.525444984 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.560944080 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.561106920 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.561228037 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.561228037 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.561321974 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.561350107 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.563373089 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.563400030 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:08.563610077 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.563610077 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:08.563635111 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.218269110 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.218889952 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.218947887 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.219424963 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.219438076 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.234688044 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.235116959 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.235142946 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.235536098 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.235543013 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.264235020 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.264767885 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.264785051 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.265268087 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.265271902 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.300956964 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.301503897 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.301510096 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.301975965 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.301979065 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.302725077 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.303194046 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.303215027 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.303585052 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.303591967 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.350894928 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.350938082 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.351773977 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.355828047 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.355864048 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.355890989 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.355905056 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.359394073 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.359415054 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.359482050 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.359642982 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.359658003 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.407461882 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.407538891 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.407591105 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.407785892 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.407795906 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.407804012 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.407809973 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.411106110 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.411187887 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.411453009 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.411595106 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.411631107 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.430989027 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.431194067 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.431252956 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.431287050 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.431293011 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.431299925 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.431303024 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.433746099 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.433789968 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.434024096 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.434175014 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.434190989 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.439055920 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.439207077 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.439273119 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.439301014 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.439310074 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.439337015 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.439342976 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.441569090 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.441606998 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.441706896 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.441842079 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.441869020 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.454631090 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.454781055 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.454966068 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.454967022 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.454967022 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.457110882 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.457129002 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.457247019 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.457387924 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.457401991 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:09.751902103 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:09.751975060 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.126837015 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.127928019 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.127928019 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.127945900 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.127955914 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.153678894 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.154139042 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.154171944 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.154575109 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.154603004 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.208604097 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.209527969 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.209528923 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.209547043 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.209573030 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.218261003 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.218612909 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.218646049 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.219094038 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.219099998 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.264403105 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.264441967 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.264755011 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.264755964 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.264792919 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.264805079 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.267962933 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.268028021 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.268631935 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.268631935 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.268723011 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.287287951 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.287431002 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.287574053 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.287574053 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.287687063 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.287712097 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.290736914 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.290780067 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.290894985 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.290971994 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.290982962 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.338366032 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.338727951 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.338871002 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.338871002 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.339063883 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.339087009 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.341753006 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.341785908 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.341998100 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.341998100 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.342047930 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.356770039 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.357038021 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.357116938 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.357146025 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.357146025 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.357156992 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.357167006 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.359601974 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.359627962 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.359888077 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.359888077 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.359918118 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.405121088 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.406791925 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.406791925 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.406816006 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.406852007 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.556231022 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.556371927 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.556619883 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.556684017 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.556684017 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.556710005 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.556732893 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.559688091 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.559735060 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.559941053 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.559942007 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:10.559981108 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:10.708842039 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:10.708925009 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:10.709000111 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:10.709496975 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:10.709532022 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:11.031024933 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.031650066 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.031724930 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.032231092 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.032246113 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.041387081 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.041974068 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.042009115 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.042500019 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.042505980 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.115638971 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.116225004 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.116250992 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.116714954 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.116724968 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.136023045 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.136521101 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.136533022 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.137062073 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.137067080 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.167226076 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.167270899 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.167526007 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.167577982 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.167577982 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.167613029 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.167635918 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.170824051 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.170872927 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.171015024 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.171185970 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.171202898 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.174681902 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.175252914 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.175339937 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.175339937 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.175364017 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.175379038 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.178755045 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.178821087 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.178905010 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.179059982 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.179091930 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.247905970 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.248342991 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.248454094 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.248508930 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.248532057 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.248558998 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.248572111 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.251684904 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.251733065 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.251926899 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.252159119 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.252170086 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.276385069 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.276539087 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.276662111 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.276740074 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.276740074 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.276751995 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.276758909 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.279679060 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.279721975 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.279957056 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.280105114 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.280133963 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.295619011 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.296082973 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.296101093 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.296555996 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.296562910 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.425743103 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.426071882 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.426302910 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.426353931 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.426378012 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.426389933 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.426398039 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.429378033 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.429450035 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.429624081 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.429857016 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.429871082 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.584069014 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:11.584448099 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:11.584495068 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:11.584800959 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:11.585263014 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:11.585335970 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:11.626970053 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:11.910460949 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.911014080 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.911036968 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:11.913822889 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:11.913830042 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.001403093 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.002211094 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.002240896 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.002516031 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.002530098 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.010349989 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.011142969 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.011142969 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.011173964 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.011185884 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.042704105 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.042942047 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.043029070 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.043029070 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.043087006 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.043107033 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.046159983 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.046202898 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.046386003 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.046437025 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.046447992 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.130389929 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.130805016 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.130928040 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.130971909 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.130971909 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.130995989 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.131026030 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.134027004 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.134150028 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.134382010 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.134382010 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.134464025 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.143733025 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.143892050 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.144077063 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.144077063 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.144279003 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.144296885 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.146354914 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.146401882 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.146564007 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.146656990 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.146673918 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.168849945 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.169258118 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.169270039 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.169764042 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.169770002 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.300717115 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.300863981 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.301003933 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.301028013 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.301028013 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.301048040 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.301058054 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.303941011 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.304006100 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.304301023 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.304301023 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.304354906 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.775991917 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.776573896 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.776611090 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.777173042 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.777184010 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.876781940 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.877408028 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.877451897 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.877918005 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.877931118 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.908205986 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.908957005 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.908984900 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.909507990 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.909521103 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.917923927 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.918312073 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.918376923 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.918426991 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.918426991 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.918450117 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.918471098 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.921612978 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.921667099 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.921750069 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.921926022 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.921952963 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.937733889 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.938143969 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.938200951 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:12.938580036 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:12.938592911 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.009737015 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.009890079 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.010039091 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.010130882 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.010160923 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.010185957 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.010200977 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.013427973 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.013452053 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.013523102 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.013676882 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.013689041 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.039216995 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.039449930 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.039563894 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.039623022 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.039623022 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.039644957 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.039681911 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.042237997 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.042260885 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.042323112 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.042562962 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.042576075 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.054590940 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.055006981 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.055028915 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.055484056 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.055495977 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.069758892 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.070247889 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.070297956 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.070338964 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.070358992 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.070375919 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.070382118 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.072952032 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.072962046 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.073019028 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.073177099 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.073187113 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.186348915 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.186537027 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.186619043 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.186780930 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.186817884 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.186852932 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.186866999 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.189987898 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.190001011 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.190079927 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.190213919 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.190226078 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.652863026 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.666357040 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.666390896 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.667747021 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.667762995 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.749718904 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.750648022 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.750668049 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.751750946 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.751755953 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.792587996 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.792655945 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.792732000 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.793212891 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.793212891 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.793258905 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.793287039 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.794650078 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.795676947 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.795695066 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.796478987 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.796484947 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.798891068 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.798938990 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.799091101 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.817828894 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.823409081 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.823431969 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.824985027 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.825001955 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.825808048 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.825810909 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.879218102 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.879426003 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.879487038 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.879755974 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.879767895 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.879777908 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.879781961 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.884236097 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.884320974 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.884401083 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.884689093 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.884726048 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.924735069 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.924946070 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.925008059 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.941823006 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.941833019 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.942203045 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.944293022 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.944308043 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.945132971 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.945138931 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.951147079 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.951198101 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.951342106 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.951771975 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.951786041 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.964628935 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.964780092 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.964859009 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.965167999 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.965176105 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.965188026 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.965192080 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.969667912 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.969742060 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:13.969841957 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.970304966 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:13.970340967 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.084892988 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.085041046 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.085561991 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.085810900 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.085824966 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.085925102 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.085932016 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.090787888 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.090828896 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.090979099 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.091367006 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.091377020 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.557586908 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.558631897 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.558649063 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.559828997 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.559834957 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.623750925 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.624490976 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.624531031 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.625363111 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.625369072 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.689268112 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.689506054 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.689872026 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.690603018 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.690620899 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.692024946 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.693530083 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.693541050 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.694434881 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.694441080 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.698328972 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.698412895 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.698596001 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.698869944 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.698906898 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.704730988 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.705988884 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.706007957 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.707103968 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.707113981 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.754472971 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.754605055 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.754698992 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.754990101 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.755023003 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.755070925 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.755085945 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.759742975 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.759784937 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.760042906 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.760410070 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.760422945 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.815558910 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.818743944 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.818759918 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.819988966 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.819994926 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.822007895 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.822144032 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.822297096 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.822706938 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.822706938 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.822721958 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.822730064 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.827991009 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.828043938 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.828260899 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.828510046 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.828541040 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.856529951 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.856594086 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.856884956 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.857184887 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.857201099 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.869630098 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.869688988 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.869862080 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.870421886 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.870454073 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.945681095 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.945879936 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.946000099 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.946086884 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.946110010 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.946121931 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.946130037 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.949619055 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.949717045 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:14.949794054 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.950110912 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:14.950145960 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.431729078 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.432280064 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.432302952 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.433248997 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.433255911 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.493505001 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.494451046 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.494467974 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.495841026 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.495848894 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.561196089 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.561351061 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.561439037 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.561538935 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.561557055 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.561569929 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.561577082 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.564779043 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.564883947 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.564971924 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.565149069 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.565184116 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.571393967 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.571825981 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.571837902 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.572307110 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.572312117 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.603686094 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.604249001 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.604279995 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.604773998 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.604784966 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.641920090 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.641949892 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.641999960 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.642002106 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.642049074 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.642354012 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.642375946 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.642385960 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.642391920 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.646008968 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.646095991 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.646214962 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.646398067 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.646425009 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.704265118 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.704332113 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.704530001 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.704612970 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.704613924 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.704668045 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.704705954 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.707648039 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.707669020 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.707730055 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.707899094 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.707909107 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.714692116 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.715131998 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.715188026 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.715711117 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.715724945 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.739149094 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.739218950 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.739270926 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.739429951 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.739458084 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.739551067 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.739563942 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.742182970 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.742202044 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.742260933 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.742424965 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.742439985 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.861836910 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.861896992 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.861973047 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.862034082 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.862070084 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.862124920 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.862421036 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.862448931 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.867336035 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.867377043 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:15.867459059 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.867698908 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:15.867718935 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.306886911 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.308593988 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.308666945 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.309102058 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.309120893 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.399337053 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.400692940 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.400722980 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.401793957 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.401801109 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.448976040 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.449007988 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.449063063 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.449074030 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.449131966 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.449837923 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.449881077 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.456407070 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.456438065 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.456499100 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.456991911 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.457005978 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.467053890 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.467726946 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.467752934 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.468823910 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.468831062 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.476103067 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.476774931 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.476808071 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.477683067 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.477689981 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.582030058 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.582118034 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.582192898 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.582254887 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.582602978 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.582664013 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.598776102 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.598855972 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.598927021 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.603696108 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.603696108 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.603761911 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.603801966 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.605468988 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.605468988 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.605484962 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.605496883 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.610605001 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.610673904 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.610745907 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.610913038 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.610979080 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.611025095 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.612287998 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.612381935 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.612464905 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.612636089 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.612669945 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.612998962 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.613013029 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.613025904 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.613032103 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.614759922 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.615988016 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.615998030 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.616847038 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.616852045 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.617284060 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.617319107 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.619488001 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.619513988 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.619601965 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.619803905 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.619824886 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.749576092 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.749705076 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.749847889 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.750273943 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.750303984 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.750340939 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.750353098 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.754021883 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.754121065 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:16.754347086 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.757827044 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:16.757863998 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.190354109 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.191409111 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.191409111 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.191427946 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.191438913 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.328568935 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.328648090 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.329070091 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.329070091 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.329102993 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.329114914 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.333379984 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.333424091 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.333612919 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.333729982 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.333741903 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.356663942 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.357676029 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.357676029 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.357763052 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.357861042 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.361987114 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.362761974 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.362761974 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.362796068 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.362807035 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.486841917 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.487029076 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.487302065 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.487302065 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.487632990 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.487672091 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.490314007 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.490339994 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.490609884 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.490609884 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.490642071 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.493627071 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.493902922 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.494071960 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.494071960 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.494173050 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.494187117 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.494807005 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.495265007 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.495349884 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.495660067 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.495678902 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.496411085 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.496439934 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.496629953 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.496700048 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.496722937 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.568408012 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.569118977 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.569165945 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.569822073 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.569835901 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.626303911 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.626477003 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.626584053 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.627078056 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.627115965 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.627163887 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.627182961 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.631865025 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.631905079 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.636082888 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.639697075 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.639714956 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.706418991 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.706489086 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.706543922 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.706845045 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.706865072 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.706876040 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.706882000 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.710459948 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.710525990 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:17.710612059 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.710793018 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:17.710829973 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.080523968 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.081166029 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.081182003 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.081856966 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.081864119 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.213247061 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.213316917 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.213366985 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.213722944 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.213737965 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.213751078 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.213757038 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.217572927 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.217605114 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.217679024 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.217874050 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.217890024 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.260529995 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.261084080 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.261112928 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.261836052 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.261842966 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.294955969 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.295530081 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.295567989 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.296118021 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.296125889 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.380672932 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.381176949 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.381190062 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.381772995 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.381778002 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.395553112 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.395689011 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.395745039 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.395952940 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.395966053 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.395981073 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.395988941 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.399593115 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.399693012 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.399756908 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.400080919 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.400130033 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.423654079 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.423738956 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.423789024 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.423801899 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.424123049 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.424132109 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.424144030 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.424282074 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.427508116 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.427541971 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.427611113 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.427762985 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.427782059 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.475951910 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.476484060 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.476521015 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.477010012 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.477020979 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.514492989 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.514662981 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.514776945 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.514836073 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.514842987 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.514853954 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.514858007 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.518208981 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.518270016 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.518347025 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.518593073 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.518630028 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.611917019 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.611949921 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.611990929 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.612004995 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.612051964 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.615999937 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.616019011 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.616034985 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.616041899 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.621109962 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.621169090 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.621232033 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.621560097 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.621572971 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.940660954 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.941479921 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.941504002 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:18.943042994 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:18.943053007 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.072068930 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.072132111 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.072381020 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.072422028 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.072422028 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.072438955 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.072443962 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.075711966 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.075736046 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.075879097 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.076035976 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.076050997 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.125950098 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.126957893 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.126959085 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.127038002 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.127068996 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.172440052 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.173495054 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.173495054 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.173512936 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.173520088 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.258974075 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.259032011 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.259352922 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.259352922 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.259412050 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.259439945 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.262494087 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.262537003 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.263024092 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.263024092 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.263055086 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.295288086 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.295872927 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.295892954 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.296410084 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.296416998 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.304547071 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.304604053 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.306201935 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.306497097 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.306518078 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.306529999 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.306536913 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.311889887 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.311919928 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.312037945 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.312330961 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.312340975 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.361422062 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.362190962 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.362210035 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.362797976 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.362802982 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.435534954 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.435564041 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.435607910 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.435885906 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.435885906 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.435990095 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.436001062 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.439151049 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.439167023 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.439373970 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.439495087 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.439508915 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.493403912 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.493468046 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.493685007 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.493685007 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.493886948 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.493916988 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.496505976 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.496530056 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.496752977 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.496752977 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.496773005 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.813067913 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.813683987 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.813744068 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.814212084 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.814224958 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.944245100 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.944315910 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.944391012 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.944721937 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.944721937 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.944756031 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.944780111 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.948153019 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.948194027 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:19.948266983 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.948425055 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:19.948456049 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.006287098 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.007333994 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.007350922 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.008126020 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.008132935 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.041352034 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.041918993 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.041930914 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.042511940 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.042526007 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.144710064 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.144819021 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.144942999 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.145102024 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.145122051 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.145133018 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.145138979 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.148519039 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.148549080 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.148607016 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.148751974 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.148761034 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.171519041 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.171550989 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.171601057 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.171647072 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.171719074 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.171921015 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.171921015 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.171935081 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.171943903 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.174854994 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.174890995 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.174998999 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.175173998 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.175189018 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.226784945 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.227377892 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.227390051 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.227937937 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.227942944 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.236181974 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.236670017 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.236709118 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.237500906 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.237518072 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.363609076 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.363646030 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.363686085 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.363785982 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.363785982 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.364103079 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.364103079 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.364119053 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.364128113 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.367502928 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.367533922 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.367602110 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.367846966 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.367867947 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.395545006 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.395665884 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.395798922 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.396003962 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.396004915 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.396039963 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.396064043 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.399425030 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.399463892 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.399687052 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.399893999 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.399921894 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.679707050 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.692836046 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.692893028 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.693228006 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.693240881 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.819616079 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.819675922 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.820775986 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.820775986 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.820846081 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.820874929 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.825798988 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.825814962 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.829993963 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.830682993 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.830694914 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.892420053 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.893301964 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.893323898 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.895832062 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.895837069 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.923304081 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.924195051 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.924269915 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:20.925151110 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:20.925169945 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.025737047 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.025963068 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.026215076 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.026787996 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.026806116 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.026863098 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.026870012 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.032354116 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.032383919 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.033058882 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.036545038 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.036561012 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.056538105 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.056617022 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.059947014 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.059947014 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.060122967 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.060151100 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.063539028 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.063550949 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.063719988 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.063868999 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.063882113 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.098886013 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.099591017 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.099608898 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.100370884 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.100383043 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.128535986 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.129182100 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.129206896 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.132201910 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.132214069 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.227092028 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.227127075 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.227171898 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.227205038 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.227319002 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.227778912 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.227802038 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.227861881 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.227868080 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.233871937 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.233896971 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.235635042 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.235635042 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.235665083 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.256570101 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.256715059 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.260255098 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.260255098 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.260509968 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.260529041 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.264651060 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.264765024 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.265968084 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.266103029 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.266139984 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.700418949 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:21.700480938 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:21.700550079 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:21.828345060 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.828916073 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.828926086 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.829570055 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.829576015 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.832431078 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.832844019 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.832849026 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.833033085 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.833301067 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.833304882 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.833550930 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.833570004 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.833895922 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.833901882 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.959832907 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.959991932 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.960033894 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.960035086 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.960097075 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.960235119 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.960242033 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.960252047 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.960257053 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.963578939 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.963665009 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.963685989 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.963752031 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.963758945 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.963799000 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.963903904 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.963934898 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.964001894 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.964052916 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.964067936 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.964081049 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.964087009 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.964107990 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.964150906 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.964262009 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.964265108 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.964273930 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.964277029 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.966592073 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.966691971 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.966855049 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.966953039 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.966988087 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.967227936 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.967241049 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.967299938 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.967427015 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.967437983 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.983277082 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.983728886 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.983747005 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:21.984210968 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:21.984216928 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.034121990 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.034681082 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.034718990 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.035360098 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.035376072 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.112781048 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.112984896 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.113044024 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.138624907 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.138648987 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.138663054 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.138680935 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.143248081 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.143277884 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.143338919 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.154396057 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.154428959 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.169462919 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.169595957 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.169783115 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.175139904 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.175189018 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.175220966 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.175237894 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.252034903 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.252047062 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.252103090 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.253690004 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.253701925 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.665747881 CEST	49809	443	192.168.2.4	142.250.186.164
Oct 25, 2024 20:23:22.665797949 CEST	443	49809	142.250.186.164	192.168.2.4
Oct 25, 2024 20:23:22.701781034 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.702063084 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.703458071 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.703458071 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.703475952 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.703494072 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.704673052 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.704673052 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.704722881 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.704741955 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.747243881 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.748339891 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.748375893 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.748682022 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.748694897 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.833409071 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.833475113 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.833801031 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.834189892 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.834189892 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.834207058 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.834218025 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.838499069 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.838534117 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.838742018 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.839034081 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.839050055 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.864587069 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.864617109 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.864660978 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.864705086 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.864761114 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.864908934 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.864953041 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.864988089 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.865005016 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.869820118 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.869832993 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.869930029 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.872827053 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.872838974 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.875994921 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.876801968 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.876827002 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.881884098 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.881896973 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.883452892 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.883654118 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.883800030 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.883930922 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.883930922 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.883949995 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.883971930 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.888119936 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.888164043 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.894037008 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.894037008 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.894068003 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.993355036 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.994333982 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.994353056 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:22.995223045 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:22.995239973 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.005446911 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.005506992 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.005656958 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.005918026 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.005918026 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.005937099 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.005949974 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.011876106 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.011982918 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.012300014 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.012300968 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.012388945 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.122271061 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.122441053 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.122649908 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.122649908 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.122675896 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.122687101 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.125283003 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.125344038 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.125605106 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.125605106 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.125685930 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.589273930 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.590368986 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.590388060 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.592087984 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.592093945 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.620959997 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.621740103 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.621754885 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.624078989 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.624083996 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.629198074 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.629899979 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.629930973 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:23.632623911 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:23.632639885 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040762901 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040828943 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040875912 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.040896893 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040920019 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040921926 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040932894 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040962934 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.040977001 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.041002989 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.041027069 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.041073084 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.041110039 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.041110039 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.041682959 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.041697979 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.041721106 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.041728020 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.044855118 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.044867039 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.047441959 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.047441959 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.047478914 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.047507048 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.047558069 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.051137924 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.051203012 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.051984072 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.051999092 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.056426048 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.056489944 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.056571960 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.057044983 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.057079077 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.059454918 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.059488058 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.059551001 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.062314034 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.062357903 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.062408924 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.062849998 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.062870979 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.063082933 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.063096046 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.173723936 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.174793959 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.174841881 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.175786972 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.175800085 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.181313038 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.181447029 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.181639910 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.181735992 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.181780100 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.188167095 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.188199043 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.188258886 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.188647985 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.188666105 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.303716898 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.303785086 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.303847075 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.303877115 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.303903103 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.303950071 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.304269075 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.304303885 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.304330111 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.304346085 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.312120914 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.312159061 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.312230110 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.312758923 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.312768936 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.799592972 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.800273895 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.800304890 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.800710917 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.800724030 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.805928946 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.806756020 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.806756020 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.806791067 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.806807995 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.809751987 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.810085058 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.810101986 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.810458899 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.810466051 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.932641029 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.932687998 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.933027029 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.933027029 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.933212996 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.933229923 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.936111927 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.936142921 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.936219931 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.936377048 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.936393976 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.937509060 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.937623978 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.937798023 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.937798023 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.937933922 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.937962055 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.940000057 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.940035105 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.940124035 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.940274000 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.940290928 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.942101002 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.942127943 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.942169905 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.942222118 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.942382097 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.942382097 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.942508936 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.942522049 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.944257021 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.944269896 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.944376945 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.944446087 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.944453001 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.953485012 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.954359055 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.954359055 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:24.954374075 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:24.954396009 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.054758072 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.055866957 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.055886030 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.057816029 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.057821989 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.088745117 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.088943005 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.089040995 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.089061975 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.089145899 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.089145899 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.089447975 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.089462042 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.092009068 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.092039108 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.092272997 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.092272997 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.092300892 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.184607029 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.184751987 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.184931040 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.185471058 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.185471058 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.185497046 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.185511112 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.188991070 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.189009905 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.189275026 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.189275026 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.189301968 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.663439035 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.664047956 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.664064884 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.664549112 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.664554119 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.668504953 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.668865919 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.668900967 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.669244051 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.669255972 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.707964897 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.708357096 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.708376884 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.708777905 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.708789110 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.807301998 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.807404041 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.807476997 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.807686090 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.807715893 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.807744980 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.807776928 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.810878992 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.810899019 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.810959101 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.811130047 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.811142921 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.818233013 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.818301916 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.818470001 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.818521023 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.818536043 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.818545103 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.818550110 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.821392059 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.821417093 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.821474075 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.821645975 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.821657896 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.846071005 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.846704960 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.846716881 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.847215891 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.847220898 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.861063004 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.861145973 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.861177921 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.861196995 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.861231089 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.861330032 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.861351013 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.861373901 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.861401081 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.863929987 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.863939047 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.864012957 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.864144087 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.864155054 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.921358109 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.921787024 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.921796083 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.922249079 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.922252893 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.981775045 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.981905937 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.982095957 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.982126951 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.982142925 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.982151985 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.982157946 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.985161066 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.985223055 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:25.985300064 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.985470057 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:25.985517025 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.050041914 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.050339937 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.050411940 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.050420046 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.050437927 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.050484896 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.050539970 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.050549030 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.050555944 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.050559998 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.053724051 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.053824902 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.054035902 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.054227114 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.054264069 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.555447102 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.556180954 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.556195021 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.556682110 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.556685925 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.568669081 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.569045067 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.569067001 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.569416046 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.569420099 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.598784924 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.599145889 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.599175930 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.599714041 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.599720955 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.691102028 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.691354990 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.691827059 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.701394081 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.701394081 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.701407909 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.701420069 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.701726913 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.701788902 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.701855898 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.703907013 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.703907013 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.703916073 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.703922987 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.715996981 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.716034889 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.716177940 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.717561960 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.717566967 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.717605114 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.717641115 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.717881918 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.718092918 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.718125105 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.738006115 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.738045931 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.738221884 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.738451004 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.738451004 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.738467932 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.738477945 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.744817972 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.750266075 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.750274897 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.750308037 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.750308990 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.750490904 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.750731945 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.750742912 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.751903057 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.751920938 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.785433054 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.785938025 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.785983086 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.788954020 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.788970947 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.880619049 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.880692005 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.880780935 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.880815029 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.880930901 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.881098032 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.881098032 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.881125927 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.881150961 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.884263992 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.884314060 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:26.888114929 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.889147043 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:26.889178038 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.118623972 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.118767023 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.119014978 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.119014978 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.119014978 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.122046947 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.122086048 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.122385025 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.122385025 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.122421980 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.424268961 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.424320936 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.460619926 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.461381912 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.461426973 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.461462975 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.461720943 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.461733103 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.461821079 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.461883068 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.462146044 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.462161064 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.492857933 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.493834972 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.493834972 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.493853092 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.493872881 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594022989 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594063044 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594079971 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594091892 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594108105 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594214916 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.594219923 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.594244957 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.594446898 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.594446898 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.594450951 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.594450951 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.594472885 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594485998 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594496012 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.594511032 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.597764015 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.597780943 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.597806931 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.597851038 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.597879887 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.597935915 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.598018885 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.598031998 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.598050117 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.598063946 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.635665894 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.636420965 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.636431932 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.636636019 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.636642933 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.638411045 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.638679981 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.638777018 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.638777018 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.638859034 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.638869047 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.641302109 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.641343117 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.641813040 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.641813040 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.641866922 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.766113043 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.766242027 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.766333103 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.766566038 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.766586065 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.766599894 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.766608000 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.770335913 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.770373106 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.770463943 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.770584106 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.770600080 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.872033119 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.872654915 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.872667074 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:27.873389959 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:27.873397112 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.003993988 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.004153013 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.004208088 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.004514933 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.004523039 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.007971048 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.008009911 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.008086920 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.008271933 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.008299112 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.339273930 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.339873075 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.339905977 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.340152025 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.340615988 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.340643883 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.340868950 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.340881109 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.341118097 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.341136932 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.385094881 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.385751009 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.385762930 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.386291027 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.386302948 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.468792915 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.468833923 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.468939066 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.469178915 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.469178915 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.469212055 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.469234943 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.472398996 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.472443104 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.472512960 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.472707033 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.472722054 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.473539114 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.474028111 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.474080086 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.474123955 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.474133968 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.474159002 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.474164009 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.476243019 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.476258039 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.476377964 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.476550102 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.476562977 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.521193981 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.521907091 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.521924019 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.522396088 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.522407055 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.570575953 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.570960999 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.571074963 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.571105003 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.571105003 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.571122885 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.571132898 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.574132919 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.574162960 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.574244022 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.574453115 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.574465990 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.654021978 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.654062986 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.654105902 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.654167891 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.654402018 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.654402018 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.654427052 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.654449940 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.657747984 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.657763004 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.657824039 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.658077002 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.658091068 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.757611990 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.758807898 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.758807898 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 25, 2024 20:23:28.758829117 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 25, 2024 20:23:28.758831978 CEST	443	49903	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 20:22:05.980242014 CEST	53	56314	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:06.151199102 CEST	53	59892	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:07.477541924 CEST	49886	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:07.477803946 CEST	53497	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:07.487814903 CEST	53	53497	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:07.492104053 CEST	53	49886	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:07.819228888 CEST	53	62446	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:08.476423979 CEST	63788	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:08.476619959 CEST	60535	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:08.488107920 CEST	53	60535	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:08.488219023 CEST	53	63788	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:10.646559000 CEST	53258	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:10.649808884 CEST	64454	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:10.654812098 CEST	53	53258	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:10.660322905 CEST	53	64454	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:11.842570066 CEST	59765	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:11.856090069 CEST	60140	53	192.168.2.4	1.1.1.1
Oct 25, 2024 20:22:11.858705044 CEST	53	59765	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:11.878952026 CEST	53	60140	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:20.987391949 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 20:22:24.839879036 CEST	53	55594	1.1.1.1	192.168.2.4
Oct 25, 2024 20:22:44.121418953 CEST	53	57765	1.1.1.1	192.168.2.4
Oct 25, 2024 20:23:05.891550064 CEST	53	59323	1.1.1.1	192.168.2.4
Oct 25, 2024 20:23:06.732352018 CEST	53	64318	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 25, 2024 20:22:11.879019976 CEST	192.168.2.4	1.1.1.1	c250	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 20:22:07.477541924 CEST	192.168.2.4	1.1.1.1	0x8972	Standard query (0)	glsft2.my.salesforce.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:07.477803946 CEST	192.168.2.4	1.1.1.1	0x559b	Standard query (0)	glsft2.my.salesforce.com	65	IN (0x0001)	false
Oct 25, 2024 20:22:08.476423979 CEST	192.168.2.4	1.1.1.1	0x7e7c	Standard query (0)	glsft2.my.salesforce.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:08.476619959 CEST	192.168.2.4	1.1.1.1	0x2768	Standard query (0)	glsft2.my.salesforce.com	65	IN (0x0001)	false
Oct 25, 2024 20:22:10.646559000 CEST	192.168.2.4	1.1.1.1	0x4dfb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:10.649808884 CEST	192.168.2.4	1.1.1.1	0xc508	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 20:22:11.842570066 CEST	192.168.2.4	1.1.1.1	0xbe86	Standard query (0)	glsft2.my.salesforce.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:11.856090069 CEST	192.168.2.4	1.1.1.1	0x7dba	Standard query (0)	glsft2.my.salesforce.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 20:22:07.487814903 CEST	1.1.1.1	192.168.2.4	0x559b	No error (0)	glsft2.my.salesforce.com	usa678.sfdc-lywfpd.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:22:07.492104053 CEST	1.1.1.1	192.168.2.4	0x8972	No error (0)	glsft2.my.salesforce.com	usa678.sfdc-lywfpd.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:22:07.492104053 CEST	1.1.1.1	192.168.2.4	0x8972	No error (0)	usa678.sfdc-lywfpd.salesforce.com		44.224.75.194	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:07.492104053 CEST	1.1.1.1	192.168.2.4	0x8972	No error (0)	usa678.sfdc-lywfpd.salesforce.com		52.39.109.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:07.492104053 CEST	1.1.1.1	192.168.2.4	0x8972	No error (0)	usa678.sfdc-lywfpd.salesforce.com		52.42.154.120	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:08.488107920 CEST	1.1.1.1	192.168.2.4	0x2768	No error (0)	glsft2.my.salesforce.com	usa678.sfdc-lywfpd.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:22:08.488219023 CEST	1.1.1.1	192.168.2.4	0x7e7c	No error (0)	glsft2.my.salesforce.com	usa678.sfdc-lywfpd.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:22:08.488219023 CEST	1.1.1.1	192.168.2.4	0x7e7c	No error (0)	usa678.sfdc-lywfpd.salesforce.com		44.224.75.194	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:08.488219023 CEST	1.1.1.1	192.168.2.4	0x7e7c	No error (0)	usa678.sfdc-lywfpd.salesforce.com		52.39.109.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:08.488219023 CEST	1.1.1.1	192.168.2.4	0x7e7c	No error (0)	usa678.sfdc-lywfpd.salesforce.com		52.42.154.120	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:10.654812098 CEST	1.1.1.1	192.168.2.4	0x4dfb	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:10.660322905 CEST	1.1.1.1	192.168.2.4	0xc508	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 20:22:11.858705044 CEST	1.1.1.1	192.168.2.4	0xbe86	No error (0)	glsft2.my.salesforce.com	usa678.sfdc-lywfpd.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:22:11.858705044 CEST	1.1.1.1	192.168.2.4	0xbe86	No error (0)	usa678.sfdc-lywfpd.salesforce.com		44.224.75.194	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:11.858705044 CEST	1.1.1.1	192.168.2.4	0xbe86	No error (0)	usa678.sfdc-lywfpd.salesforce.com		52.39.109.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:11.858705044 CEST	1.1.1.1	192.168.2.4	0xbe86	No error (0)	usa678.sfdc-lywfpd.salesforce.com		52.42.154.120	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:22:11.878952026 CEST	1.1.1.1	192.168.2.4	0x7dba	No error (0)	glsft2.my.salesforce.com	usa678.sfdc-lywfpd.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:22:57.850640059 CEST	1.1.1.1	192.168.2.4	0x1c3c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:22:57.850640059 CEST	1.1.1.1	192.168.2.4	0x1c3c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 20:23:19.308670998 CEST	1.1.1.1	192.168.2.4	0xcfa5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 20:23:19.308670998 CEST	1.1.1.1	192.168.2.4	0xcfa5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

glsft2.my.salesforce.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	44.224.75.194	80	5480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 20:22:07.755806923 CEST	516	OUT	GET /servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext HTTP/1.1 Host: glsft2.my.salesforce.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 20:22:08.466029882 CEST	740	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 18:22:08 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Sat, 25-Oct-2025 18:22:08 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Sat, 25-Oct-2025 18:22:08 GMT; Max-Age=31536000; secure; SameSite=None X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Location: https://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Thu, 01 Jan 1970 00:00:00 GMT Transfer-Encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 25, 2024 20:22:53.471707106 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	44.224.75.194	80	5480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 20:22:52.769793987 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	44.224.75.194	443	5480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:09 UTC	744	OUT	GET /servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext HTTP/1.1 Host: glsft2.my.salesforce.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 18:22:09 UTC	1079	IN	HTTP/1.1 302 Found Date: Fri, 25 Oct 2024 18:22:09 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Sat, 25-Oct-2025 18:22:09 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Sat, 25-Oct-2025 18:22:09 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Set-Cookie: BrowserId=DAtLpZL-Ee-GZnMAWnwcaw; domain=.salesforce.com; path=/; expires=Sat, 25-Oct-2025 18:22:09 GMT; Max-Age=31536000; secure; SameSite=None Location: https://glsft2.my.salesforce.com/s.gif Content-Length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	44.224.75.194	443	5480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:10 UTC	772	OUT	GET /s.gif HTTP/1.1 Host: glsft2.my.salesforce.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=DAtLpZL-Ee-GZnMAWnwcaw
2024-10-25 18:22:10 UTC	672	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:22:10 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=10368000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sat, 22 Feb 2025 18:22:10 GMT Last-Modified: Tue, 27 May 2003 18:28:08 GMT Content-Type: image/gif Accept-Ranges: bytes connection: close Transfer-Encoding: chunked
2024-10-25 18:22:10 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-25 18:22:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	44.224.75.194	443	5480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:11 UTC	709	OUT	GET /favicon.ico HTTP/1.1 Host: glsft2.my.salesforce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://glsft2.my.salesforce.com/s.gif Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=DAtLpZL-Ee-GZnMAWnwcaw
2024-10-25 18:22:11 UTC	606	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:22:11 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Mon, 09 Dec 2024 18:22:11 GMT Content-Type: image/x-icon connection: close Transfer-Encoding: chunked
2024-10-25 18:22:11 UTC	5438	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 00 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 dc 9d 00 17 dc 9d 00 5f dc 9d 00 69 dc 9d 00 27 dc 9d 00 03 ff ff ff 01 ff ff ff Data Ascii: 1536 h& ( @_i'
2024-10-25 18:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	44.224.75.194	443	5480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:12 UTC	459	OUT	GET /favicon.ico HTTP/1.1 Host: glsft2.my.salesforce.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=DAtLpZL-Ee-GZnMAWnwcaw
2024-10-25 18:22:12 UTC	606	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:22:12 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Mon, 09 Dec 2024 18:22:12 GMT Content-Type: image/x-icon connection: close Transfer-Encoding: chunked
2024-10-25 18:22:12 UTC	5438	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 00 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 dc 9d 00 17 dc 9d 00 5f dc 9d 00 69 dc 9d 00 27 dc 9d 00 03 ff ff ff 01 ff ff ff Data Ascii: 1536 h& ( @_i'
2024-10-25 18:22:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 18:22:13 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=166969 Date: Fri, 25 Oct 2024 18:22:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 18:22:14 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=166968 Date: Fri, 25 Oct 2024 18:22:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 18:22:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:22:58 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:22:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 44315f87-b01e-0070-2fac-251cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182258Z-r197bdfb6b48v72xb403uy6hns00000001gg000000001xfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:22:58 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 18:22:58 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 18:22:58 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 18:22:58 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 18:22:58 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 18:22:58 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 18:22:59 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 18:22:59 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 18:22:59 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 18:22:59 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:59 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-16849878b78nx5sne3fztmu6xc00000001t000000000tduu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:00 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:22:59 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cddcf92d-501e-008f-6a41-269054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-17c5cb586f6sqz6fff89etrx0800000000f0000000003bug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:00 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-16849878b787sbpl0sv29sm89s00000009ng00000000m0sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:00 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 8bb6e00a-f01e-003c-3fef-248cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-15b8d89586fwzdd8urmg0p1ebs0000000b90000000007rs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:00 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-16849878b785dznd7xpawq9gcn000000029000000000fu04 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-r197bdfb6b4wmcgqdschtyp7yg00000000u0000000006huc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-16849878b78smng4k6nq15r6s400000002e000000000b2kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-16849878b786fl7gm2qg4r5y70000000013g00000000q88r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:01 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fef44d2e-901e-007b-639e-26ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-16849878b785g992cz2s9gk35c00000009p00000000063km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:01 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:00 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:00 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182300Z-16849878b78q4pnrt955f8nkx800000009h0000000005g4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:01 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:01 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 82d491bf-801e-0048-1e3d-26f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182301Z-r197bdfb6b4b4pw6nr8czsrctg00000001k00000000078ws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:01 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 43877b29-f01e-005d-36f3-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182301Z-r197bdfb6b4t7wszkhsu1pyev000000001xg000000007ndz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:01 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182301Z-16849878b78p8hrf1se7fucxk800000001pg00000000wk6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:02 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 3892a0ce-b01e-003d-5f3a-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182303Z-17c5cb586f6sqz6fff89etrx0800000000d00000000037rz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:02 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:03 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30dbe6fd-101e-0034-66db-2696ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182303Z-17c5cb586f64v7xs992vpxwchg00000000xg000000007k0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:04 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:04 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182304Z-15b8d89586fxdh48qknu9dqk2g00000004tg00000000cbzu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 18:23:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:04 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:04 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182304Z-16849878b78k8q5pxkgux3mbgg00000009hg00000000cmtn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:04 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:04 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182304Z-16849878b78qfbkc5yywmsbg0c00000000f000000000cg8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:04 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:04 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182304Z-16849878b78fssff8btnns3b14000000012000000000xr6x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:04 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:04 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:04 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182304Z-17c5cb586f64v7xs992vpxwchg00000000yg00000000475s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:04 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:05 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182305Z-16849878b787psctgubawhx7k800000009fg000000003yng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:05 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182305Z-16849878b786fl7gm2qg4r5y70000000012g00000000tskt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:05 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182305Z-16849878b78fssff8btnns3b140000000180000000004h2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:05 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: faf669f2-101e-0065-23a4-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182305Z-16849878b78j5kdg3dndgqw0vg00000002gg00000000uz1r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:05 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:05 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182305Z-16849878b78k46f8kzwxznephs00000009fg00000000c8gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:05 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:06 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:06 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182306Z-r197bdfb6b466qclztvgs64z1000000002cg000000009wse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:06 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:06 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0124f848-201e-003f-38ad-246d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182306Z-15b8d89586fvpb597drk06r8fc00000001wg00000000c9qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:06 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 96e16e7c-301e-000c-53ef-25323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182306Z-r197bdfb6b4jlq9hb8xf0re6t4000000010g0000000038h1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:06 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182306Z-16849878b78c5zx4gw8tcga1b400000009g0000000009v4d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:06 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:06 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a89f9527-e01e-0033-5af4-244695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182306Z-15b8d89586ff5l62aha9080wv00000000270000000003d3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:06 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:07 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:07 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8cd636d9-f01e-0003-4da3-264453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182307Z-16849878b78qf2gleqhwczd21s000000012000000000kfxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:07 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:07 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182307Z-15b8d89586fwzdd8urmg0p1ebs0000000bag000000003ymq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:07 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5167a131-c01e-0082-697a-25af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182307Z-15b8d89586f4zwgbgswvrvz4vs000000024g000000006wtf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:07 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:07 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182307Z-16849878b786vsxz21496wc2qn00000009kg00000000v60a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:07 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:07 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e7f2251b-001e-0017-4fad-240c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182307Z-15b8d89586f8l5961kfst8fpb00000000beg000000000z9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:07 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:08 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:08 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182308Z-16849878b78bcpfn2qf7sm6hsn00000002e000000000s8ez x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:08 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:08 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182308Z-16849878b78rjhv97f3nhawr7s00000009h000000000f6xs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:08 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:08 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182308Z-16849878b787wpl5wqkt5731b400000001qg000000007sv5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:08 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:08 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:08 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182308Z-16849878b785jrf8dn0d2rczaw00000001z000000000ue8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:08 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:08 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:08 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182308Z-16849878b78wc6ln1zsrz6q9w800000000fg00000000bpv5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:08 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:09 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:09 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 24b9edea-d01e-002b-4c3d-2625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182309Z-r197bdfb6b4cz6xrsdncwtgzd40000000sa0000000008vwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:09 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:09 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:09 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182309Z-16849878b785jrf8dn0d2rczaw00000001yg00000000w4ue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:09 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:09 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:09 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182309Z-15b8d89586flzzks5bs37v2b90000000057g0000000029yt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:09 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:09 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182309Z-16849878b786vsxz21496wc2qn00000009sg0000000015ac x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:09 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:09 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182309Z-16849878b785g992cz2s9gk35c00000009m000000000erh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:09 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:10 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:10 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182310Z-16849878b78fssff8btnns3b14000000016g00000000b5ed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:10 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:10 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 5383ad11-b01e-0053-0c56-26cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182310Z-r197bdfb6b4b4pw6nr8czsrctg00000001k0000000007993 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:10 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182310Z-16849878b785dznd7xpawq9gcn000000025000000000yvc1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:10 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:10 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182310Z-16849878b787wpl5wqkt5731b400000001n000000000kazb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:10 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182310Z-16849878b78p49s6zkwt11bbkn00000000f000000000a313 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:11 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182311Z-16849878b78tg5n42kspfr0x4800000000z00000000074t0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:11 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182311Z-16849878b78fmrkt2ukpvh9wh400000009dg00000000xvy0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:11 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182311Z-16849878b785jrf8dn0d2rczaw00000001z000000000uem2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:11 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 9121e195-401e-005b-48f2-249c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182311Z-r197bdfb6b4hsj5bywyqk9r2xw000000027g00000000f8vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:11 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6113d354-c01e-00a1-29f4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182311Z-15b8d89586flspj6y6m5fk442w00000006k000000000g5b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:11 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:11 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 04ff5eee-d01e-0049-7af2-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182311Z-15b8d89586f42m673h1quuee4s00000004ug00000000kr1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:12 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:11 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182312Z-15b8d89586fbt6nf34bm5uw08n00000004t00000000097ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:12 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:12 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182312Z-16849878b78k8q5pxkgux3mbgg00000009dg00000000xf97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:12 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:12 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:12 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 28b65c2d-201e-0003-2d3f-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182312Z-17c5cb586f65j4snyp1hqk5z2s000000027000000000c8xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:12 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:12 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3c45f43b-a01e-00ab-363f-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182312Z-r197bdfb6b47gqdjqh2kwsuz8c000000016000000000pk6n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:12 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1b3e59d2-d01e-0017-05f8-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182312Z-17c5cb586f68ph8xhrbcgmxdd400000000ng000000001mf9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:12 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2ac474a9-a01e-0098-14a3-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182312Z-16849878b786fl7gm2qg4r5y70000000012000000000xmg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:12 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:12 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 53fe968a-201e-0096-055e-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182312Z-16849878b78q4pnrt955f8nkx800000009c000000000tm78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:13 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182313Z-16849878b78rjhv97f3nhawr7s00000009kg000000008ub2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:13 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:13 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182313Z-15b8d89586ff5l62aha9080wv0000000026g000000005r1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:13 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182313Z-17c5cb586f62blg5ss55p9d6fn00000001gg000000000t5r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:13 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:13 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182313Z-17c5cb586f6sqz6fff89etrx0800000000hg000000003nn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:13 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:13 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182313Z-r197bdfb6b4d9xksru4x6qbqr000000000w0000000008mrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:13 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:13 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182313Z-16849878b78smng4k6nq15r6s400000002dg00000000e0uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:14 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:14 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 952379c8-801e-0083-0604-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182314Z-15b8d89586fst84k5f3z220tec0000000geg00000000cyb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:14 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182314Z-16849878b787psctgubawhx7k8000000099000000000ze2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:14 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 4e85c478-401e-002a-713d-26c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182314Z-r197bdfb6b4bq7nf8mnywhn9e000000001vg00000000m9xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:14 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:14 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182314Z-16849878b7898p5f6vryaqvp5800000001u0000000003d8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:14 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:14 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182314Z-17c5cb586f6f69jxsre6kx2wmc000000035g00000000gedz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:15 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:15 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4104ef10-001e-0046-6521-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182315Z-r197bdfb6b4bq7nf8mnywhn9e000000001z0000000009gaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:15 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:15 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:15 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: e37aa075-401e-0067-7f3f-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182315Z-r197bdfb6b4wmcgqdschtyp7yg00000000u0000000006mr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:15 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:15 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:15 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:15 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182315Z-16849878b787psctgubawhx7k800000009g0000000001twf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:15 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:15 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:15 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:15 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182315Z-16849878b786vsxz21496wc2qn00000009q000000000ccqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:15 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:15 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:15 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: cd4a5759-201e-005d-4b3a-26afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182315Z-17c5cb586f6zrq5bnguxgu7frc00000001s0000000000a7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:15 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:16 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:16 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: cd066ebd-401e-0035-394c-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182316Z-r197bdfb6b4gx6v9pg74w9f47s00000002t00000000044ha x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:16 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:16 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:16 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182316Z-16849878b78hz7zj8u0h2zng1400000009sg00000000133c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:16 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:16 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:16 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182316Z-16849878b786vsxz21496wc2qn00000009sg0000000015zw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:16 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:16 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:16 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182316Z-16849878b782d4lwcu6h6gmxnw00000000mg00000000ann7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:16 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:16 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:16 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182316Z-16849878b78fmrkt2ukpvh9wh400000009f000000000qpmv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:16 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:17 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:17 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182317Z-r197bdfb6b48v72xb403uy6hns000000019g00000000mwcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:17 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:17 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:17 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182317Z-15b8d89586f2hk28h0h6zye26c00000003d0000000004btn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:17 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:17 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:17 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182317Z-15b8d89586f4zwgbgswvrvz4vs000000021000000000ex8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:17 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:17 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:17 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6129b0de-c01e-00a1-59fb-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182317Z-15b8d89586f8nxpt6ys645x5v000000001z000000000gcw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:17 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:17 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:17 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182317Z-16849878b78k46f8kzwxznephs00000009d000000000pg2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:17 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:18 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:18 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 2edde2c3-c01e-002b-176a-266e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182318Z-16849878b78k8q5pxkgux3mbgg00000009f000000000qafz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:18 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:18 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:18 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182318Z-16849878b78qf2gleqhwczd21s00000000zg00000000yrc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:18 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:18 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:18 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182318Z-17c5cb586f6hhlf5mrwgq3erx8000000020g000000005tx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:18 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:18 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:18 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182318Z-16849878b78wc6ln1zsrz6q9w800000000fg00000000bqgx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:18 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:18 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:18 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182318Z-16849878b78hz7zj8u0h2zng1400000009s00000000039nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:18 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:18 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:19 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182319Z-15b8d89586f989rkfw99rwd68g000000024g00000000816b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:19 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182319Z-16849878b78x6gn56mgecg60qc00000002qg00000000e6wh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:19 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182319Z-16849878b787psctgubawhx7k800000009a000000000usag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:19 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182319Z-16849878b78k8q5pxkgux3mbgg00000009ng00000000070b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:19 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:19 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182319Z-16849878b7898p5f6vryaqvp5800000001u0000000003dn4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:19 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182319Z-16849878b78bcpfn2qf7sm6hsn00000002e000000000s98y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:20 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 95bc9e17-201e-0051-77f2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182320Z-15b8d89586fdmfsg1u7xrpfws0000000056g000000003vxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:20 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:20 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 7d0fe5a3-d01e-0049-4537-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182320Z-17c5cb586f6mkpfk79wxvcahc0000000018000000000dmfs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:20 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:20 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:20 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ee736da1-b01e-001e-7be0-260214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182320Z-17c5cb586f68ph8xhrbcgmxdd400000000fg000000003ukh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:20 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:20 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:20 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182320Z-16849878b7867ttgfbpnfxt44s00000000q000000000shvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:20 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:20 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:20 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182320Z-16849878b78wc6ln1zsrz6q9w800000000hg00000000bp5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:20 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:20 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:20 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182320Z-16849878b78hh85qc40uyr8sc80000000190000000000vy7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:21 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:20 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:21 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:20 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182320Z-16849878b786vsxz21496wc2qn00000009ng00000000kucs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:21 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:21 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182321Z-r197bdfb6b4b4pw6nr8czsrctg00000001k00000000079u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:21 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: a6d15796-a01e-00ab-7f80-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182321Z-16849878b78z5q7jpbgf6e9mcw00000009qg00000000bpsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:21 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182321Z-16849878b785jrf8dn0d2rczaw00000001y000000000xbs1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:21 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182321Z-15b8d89586fnsf5zd126eyaetw000000022g000000008f9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:21 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: c2bf3a2c-401e-0047-4d9c-248597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182321Z-15b8d89586fcvr6p5956n5d0rc00000006ug0000000048fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:21 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182322Z-17c5cb586f6z6tw6g7cmdv30m80000000240000000002x3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:22 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182322Z-16849878b78wv88bk51myq5vxc000000012000000000y1ts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:22 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:22 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182322Z-16849878b78p49s6zkwt11bbkn00000000d000000000aqha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:22 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182322Z-16849878b786lft2mu9uftf3y4000000020g0000000106qy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:22 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:22 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 26ef0c66-a01e-0070-7425-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182322Z-r197bdfb6b4hsj5bywyqk9r2xw000000028000000000ceeq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:22 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182322Z-17c5cb586f64v7xs992vpxwchg00000000w000000000b4sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:23 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:22 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:23 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:23 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8c1a2bd7-001e-008d-4028-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182323Z-17c5cb586f6qk7x5scs1ghy2m400000002yg00000000caku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:23 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:23 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:23 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: a453eede-301e-0033-02d5-26fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182323Z-r197bdfb6b4wmcgqdschtyp7yg00000000u0000000006nka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:23 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:23 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182323Z-16849878b786fl7gm2qg4r5y70000000017g000000006eme x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:23 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:23 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182323Z-16849878b78c5zx4gw8tcga1b400000009f000000000dzfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:24 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:24 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182324Z-15b8d89586f5s5nz3ffrgxn5ac00000001k0000000005yph x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:24 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:24 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182324Z-16849878b78tg5n42kspfr0x4800000000yg0000000096xs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:24 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182324Z-16849878b78bcpfn2qf7sm6hsn00000002fg00000000ky8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:24 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:24 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: f2380685-a01e-0002-0958-265074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182324Z-17c5cb586f6hhlf5mrwgq3erx800000001y000000000cd5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:24 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:24 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:24 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182324Z-16849878b782d4lwcu6h6gmxnw00000000pg0000000018np x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:24 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:24 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:25 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182325Z-16849878b785f8wh85a0w3ennn00000009fg00000000nmx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:25 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:25 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:25 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: b3872a13-301e-0020-3ef3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182325Z-r197bdfb6b466qclztvgs64z1000000002cg000000009zc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:25 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:25 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:25 UTC	591	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182325Z-16849878b787wpl5wqkt5731b400000001n000000000kc5s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 18:23:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:25 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:25 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182325Z-r197bdfb6b47gqdjqh2kwsuz8c00000001ag000000008u5f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49886	13.107.246.45	443	5480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:25 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:25 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 63177759-c01e-0046-8028-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182325Z-17c5cb586f6qk7x5scs1ghy2m4000000033g000000001wv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:25 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:25 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:25 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:25 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1da009b5-a01e-0002-0df5-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182325Z-15b8d89586flzzks5bs37v2b90000000058g00000000006g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:25 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:25 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:26 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:25 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182325Z-16849878b785f8wh85a0w3ennn00000009fg00000000nmyd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:26 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:26 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:26 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:26 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 8335fcc2-a01e-0032-24e2-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182326Z-r197bdfb6b4gqmwlpwzzs5v83s00000001ug00000000gfh7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:26 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:26 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:26 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:26 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182326Z-16849878b78smng4k6nq15r6s400000002d000000000eweq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:26 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182326Z-16849878b787wpl5wqkt5731b400000001p000000000eyxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:26 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:26 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 8b819aaa-a01e-0084-563d-269ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182326Z-15b8d89586ffsjj9qb0gmb1stn00000004zg00000000e05v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:26 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:26 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:27 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:27 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 12b50f8a-301e-0033-52f0-25fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182327Z-16849878b7898p5f6vryaqvp5800000001u0000000003e3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:27 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:27 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:27 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:27 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 458e69a0-101e-005a-559e-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182327Z-16849878b78k8q5pxkgux3mbgg00000009hg00000000cph4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 18:23:27 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:27 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:27 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182327Z-16849878b78p49s6zkwt11bbkn00000000d000000000aqxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:27 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:27 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:27 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bb32e714-c01e-008d-58b0-262eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182327Z-16849878b78hh85qc40uyr8sc8000000017g000000006y0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:27 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 18:23:27 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 18:23:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 18:23:27 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: dd440b1a-a01e-003d-1afb-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T182327Z-r197bdfb6b4gx6v9pg74w9f47s00000002sg00000000526p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 18:23:27 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1508, Parent PID: 2568

General

Target ID:	0
Start time:	14:22:00
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5480, Parent PID: 1508

General

Target ID:	2
Start time:	14:22:04
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2008 --field-trial-handle=1824,i,7493179443349228738,16118877362667362041,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6260, Parent PID: 2568

General

Target ID:	3
Start time:	14:22:06
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 39

Chrome Cache Entry: 40

Chrome Cache Entry: 41

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1508, Parent PID: 2568

General

Chronological Activities

Analysis Process: chrome.exePID: 5480, Parent PID: 1508

General

Chronological Activities

Analysis Process: chrome.exePID: 6260, Parent PID: 2568

General

Chronological Activities

Disassembly

Windows Analysis Report
http://glsft2.my.salesforce.com/servlet/servlet.ImageServer?oid=00Df4000004Jqyd&esid=018VJ00000FvvVh&from=ext