Edit tour

Windows Analysis Report
http://www.ynvgroup.com

Overview

General Information

Sample URL:	http://www.ynvgroup.com
Analysis ID:	1542502
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2024,i,15824035957569590853,321438738758834406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.ynvgroup.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49893 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.ynvgroup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.ynvgroup.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49893 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@20/0@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2024,i,15824035957569590853,321438738758834406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.ynvgroup.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2024,i,15824035957569590853,321438738758834406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
g76u52zw8ijy.wpeproxy.com	141.193.213.21	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.202.1	true	false	unknown
www.ynvgroup.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.ynvgroup.com/	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
141.193.213.21	g76u52zw8ijy.wpeproxy.com	United States	396845	DV-PRIMARY-ASN1US	false
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542502
Start date and time:	2024-10-26 00:23:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.ynvgroup.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@20/0@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.110.84, 142.250.185.142, 34.104.35.123, 20.109.210.53, 217.20.57.18, 192.229.221.95, 52.165.164.15, 199.232.214.172, 20.242.39.171, 172.217.18.3
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.ynvgroup.com

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 00:24:49.771184921 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 26, 2024 00:24:53.200243950 CEST	49735	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:53.200509071 CEST	49736	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:53.207087994 CEST	80	49735	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:53.207540989 CEST	80	49736	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:53.207632065 CEST	49735	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:53.207796097 CEST	49736	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:53.209961891 CEST	49736	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:53.216783047 CEST	80	49736	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:53.990919113 CEST	80	49736	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:54.033745050 CEST	49738	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:54.033802986 CEST	443	49738	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:54.033894062 CEST	49738	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:54.034140110 CEST	49738	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:54.034157038 CEST	443	49738	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:54.036415100 CEST	49736	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:55.851181030 CEST	443	49738	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:55.851248026 CEST	443	49738	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:55.851326942 CEST	49738	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:55.851738930 CEST	49738	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:55.851768017 CEST	443	49738	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:55.852300882 CEST	49740	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:55.852339029 CEST	443	49740	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:55.852543116 CEST	49740	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:55.852961063 CEST	49740	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:55.852972984 CEST	443	49740	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:56.361872911 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:56.361921072 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:24:56.362004995 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:56.379602909 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:56.379643917 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:24:56.755083084 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:56.755179882 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:56.755296946 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:56.768284082 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:56.768320084 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.090262890 CEST	443	49740	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:57.091856956 CEST	443	49740	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:57.092220068 CEST	49740	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:57.092573881 CEST	49740	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:57.092592001 CEST	443	49740	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:57.268526077 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:24:57.269407988 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:57.269422054 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:24:57.270497084 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:24:57.270579100 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:57.276335955 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:57.276546955 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:24:57.325145960 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:57.325160980 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:24:57.369136095 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:24:57.626440048 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.626530886 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.630080938 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.630091906 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.630496979 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.680828094 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.727356911 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.928826094 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.928983927 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.929048061 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.929224014 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.929238081 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.929296017 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.929301977 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.979612112 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.979660988 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:57.979739904 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.980796099 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:57.980814934 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:58.155637980 CEST	49744	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:58.155740023 CEST	443	49744	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:58.155869007 CEST	49744	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:58.156063080 CEST	49745	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:58.156112909 CEST	443	49745	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:58.156200886 CEST	49745	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:58.156974077 CEST	49745	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:58.156991005 CEST	443	49745	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:58.157423973 CEST	49744	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:58.157461882 CEST	443	49744	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:58.843898058 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:58.843993902 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:58.847393036 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:58.847405910 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:58.847737074 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:58.851063967 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:58.895360947 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:59.098701000 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:59.098797083 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:59.098999023 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:59.100709915 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:59.100760937 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:59.100797892 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 26, 2024 00:24:59.100815058 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 26, 2024 00:24:59.373296022 CEST	443	49744	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.373755932 CEST	49744	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.373924971 CEST	443	49744	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.373986959 CEST	49744	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.374420881 CEST	49746	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.374463081 CEST	443	49746	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.374532938 CEST	49746	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.379606962 CEST	49746	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.379633904 CEST	443	49746	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.425383091 CEST	443	49745	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.427514076 CEST	443	49745	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.427607059 CEST	49745	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.429042101 CEST	49745	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.429068089 CEST	443	49745	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.433167934 CEST	49747	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.433207989 CEST	443	49747	141.193.213.21	192.168.2.4
Oct 26, 2024 00:24:59.433295965 CEST	49747	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.437743902 CEST	49747	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:24:59.437761068 CEST	443	49747	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:00.620995045 CEST	443	49746	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:00.623478889 CEST	443	49746	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:00.623552084 CEST	49746	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:00.624386072 CEST	49746	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:00.624408960 CEST	443	49746	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:00.657532930 CEST	443	49747	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:00.657777071 CEST	49747	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:00.657896996 CEST	443	49747	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:00.657939911 CEST	49747	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:05.658108950 CEST	49751	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:05.658159018 CEST	443	49751	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:05.658324957 CEST	49751	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:05.658719063 CEST	49752	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:05.658818007 CEST	443	49752	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:05.658894062 CEST	49752	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:05.661400080 CEST	49751	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:05.661425114 CEST	443	49751	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:05.663100958 CEST	49752	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:05.663144112 CEST	443	49752	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.854374886 CEST	443	49752	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.854398966 CEST	443	49751	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.854403973 CEST	443	49752	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.854437113 CEST	443	49751	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.854491949 CEST	49752	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.854510069 CEST	49751	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.855590105 CEST	49751	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.855601072 CEST	443	49751	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.856131077 CEST	49754	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.856158018 CEST	443	49754	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.856245041 CEST	49754	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.856260061 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:07.856329918 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:07.856329918 CEST	49752	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.856338024 CEST	443	49752	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.856373072 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:07.856883049 CEST	49755	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.856910944 CEST	443	49755	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.857028961 CEST	49755	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.857120037 CEST	49754	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.857131958 CEST	443	49754	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.857290983 CEST	49755	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:07.857300043 CEST	443	49755	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:07.864185095 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 26, 2024 00:25:07.869982958 CEST	80	49723	93.184.221.240	192.168.2.4
Oct 26, 2024 00:25:07.870047092 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 26, 2024 00:25:08.235491991 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:08.235533953 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:08.701073885 CEST	80	49735	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:08.701144934 CEST	49735	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:09.080189943 CEST	443	49755	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:09.080462933 CEST	49755	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:09.080676079 CEST	443	49755	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:09.080729008 CEST	49755	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:09.087282896 CEST	443	49754	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:09.087816000 CEST	49754	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:09.087963104 CEST	443	49754	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:09.088030100 CEST	49754	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:09.897362947 CEST	49735	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:09.905438900 CEST	80	49735	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:39.004293919 CEST	49736	80	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:39.106646061 CEST	49758	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:39.106719017 CEST	443	49758	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:39.106993914 CEST	49759	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:39.107038975 CEST	49758	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:39.107053995 CEST	443	49759	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:39.107479095 CEST	49759	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:39.107863903 CEST	49759	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:39.107875109 CEST	443	49759	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:39.108056068 CEST	49758	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:39.108072996 CEST	443	49758	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:39.135183096 CEST	80	49736	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.565839052 CEST	443	49758	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.566832066 CEST	49758	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.566986084 CEST	443	49758	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.567059994 CEST	49758	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.569581032 CEST	49760	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.569719076 CEST	443	49760	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.569817066 CEST	49760	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.570144892 CEST	49760	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.570175886 CEST	443	49760	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.574768066 CEST	443	49759	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.574954987 CEST	49759	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.575064898 CEST	443	49759	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.575119019 CEST	49759	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.575326920 CEST	49761	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.575368881 CEST	443	49761	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:40.575586081 CEST	49761	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.575803995 CEST	49761	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:40.575819016 CEST	443	49761	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:41.765748024 CEST	443	49761	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:41.766122103 CEST	49761	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:41.766253948 CEST	443	49761	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:41.766371965 CEST	49761	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:41.790791988 CEST	443	49760	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:41.791018963 CEST	49760	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:41.791129112 CEST	443	49760	141.193.213.21	192.168.2.4
Oct 26, 2024 00:25:41.791230917 CEST	49760	443	192.168.2.4	141.193.213.21
Oct 26, 2024 00:25:43.932075024 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:43.932135105 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:43.932218075 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:43.932691097 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:43.932708025 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.680866003 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.680963993 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:44.686465979 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:44.686475992 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.686817884 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.702321053 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:44.747324944 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.921154976 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.921175003 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.921220064 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.921315908 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:44.921333075 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.921411037 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:44.952231884 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.952299118 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.952344894 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:44.952356100 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:44.952420950 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:44.952438116 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.040649891 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.040674925 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.040787935 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.040803909 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.044966936 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.071039915 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.071067095 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.071310997 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.071341991 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.071408987 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.073515892 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.073534966 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.073592901 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.073613882 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.073630095 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.073654890 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.077742100 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.077759027 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.077826023 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.077847958 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.079962969 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.161879063 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.161910057 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.161966085 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.161981106 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.162012100 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.162035942 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.195205927 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.195226908 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.195332050 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.195343971 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.195414066 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.195553064 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.195569038 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.195635080 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.195641041 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.195692062 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.196455002 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.196470976 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.196538925 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.196544886 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.196671009 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.197487116 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.197500944 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.197576046 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.197581053 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.197652102 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.198390961 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.198405981 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.198492050 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.198497057 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.198546886 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.199440002 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.199465990 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.199548006 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.199556112 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.199611902 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.278707981 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.278784990 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.278784990 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.278861046 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.279005051 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.279016018 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.279041052 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.279047012 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.403803110 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.403860092 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.404037952 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.405654907 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.405710936 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.405791044 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.407336950 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.407371044 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.407449007 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.408025026 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.408035994 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.408189058 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.409137964 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.409152031 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.409444094 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.409481049 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.409882069 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.409892082 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.409970045 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.410008907 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.411586046 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.411612034 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:45.411878109 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.412076950 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:45.412097931 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.136744976 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.139096022 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.139132023 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.139903069 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.139919043 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.154360056 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.154937029 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.154977083 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.155450106 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.155459881 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.156898022 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.157320023 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.157346010 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.157871962 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.157882929 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.162807941 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.163362980 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.163388968 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.164032936 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.164043903 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.173161030 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.174114943 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.174150944 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.174627066 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.174635887 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.269382000 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.269463062 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.269539118 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.269850016 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.269870043 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.269886971 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.269892931 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.273262024 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.273303032 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.273490906 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.273540020 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.273550034 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.289544106 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.290309906 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.290371895 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.290422916 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.290437937 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.290452957 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.290458918 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.293876886 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.293926954 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.294183969 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.294183969 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.294218063 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.294830084 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.294853926 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.294913054 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.294928074 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.295039892 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.295084000 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.295171022 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.295171022 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.297879934 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.297882080 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.297899961 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.297904968 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.298155069 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.298155069 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.298178911 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.299669027 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.299701929 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.299746990 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.299772978 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.299899101 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.299909115 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.299920082 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.300133944 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.300184965 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.300226927 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.302159071 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.302191973 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.302355051 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.302355051 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.302381039 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.308629990 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.308653116 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.308706999 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.308713913 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.308758974 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.308927059 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.308934927 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.308948994 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.308954954 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.311136961 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.311172962 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:46.311227083 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.311359882 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:46.311372042 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.013293028 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.033313036 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.035727978 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.042890072 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.044646978 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.067219973 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.082808971 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.082926035 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.084561110 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.091866016 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.091886044 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.092823982 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.092829943 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.093700886 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.093719959 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.094510078 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.094525099 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.094896078 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.094912052 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.095736027 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.095745087 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.097297907 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.097311020 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.097786903 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.097795963 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.098185062 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.098192930 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.099282980 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.099288940 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.221905947 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.222127914 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.222188950 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.223771095 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.223885059 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.223984003 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.225497961 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.225738049 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.225837946 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.226115942 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.226727009 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.226774931 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.235671997 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.235835075 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.235917091 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.484539032 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.484570026 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.487606049 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.487633944 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.576845884 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.576845884 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.576881886 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.576891899 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.604301929 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.604301929 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.604331017 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.604341984 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.670386076 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.670433044 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.670453072 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.670460939 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.686187029 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.686233044 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.686383963 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.689029932 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.689083099 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.689158916 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.693806887 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.693854094 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.693994999 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.696233034 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.696252108 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.696269989 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.696288109 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.697504044 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.697535038 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.699071884 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.699105024 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.699218035 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.699430943 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.699448109 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.700891018 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.700934887 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:47.701239109 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.701598883 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:47.701617956 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.437443972 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.438271999 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.439049006 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.439073086 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.439974070 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.439981937 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.440895081 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.440926075 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.441849947 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.441864014 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.446943998 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.448029995 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.448050976 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.448973894 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.448986053 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.458365917 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.459332943 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.459359884 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.460524082 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.460536003 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.482623100 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.483551979 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.483580112 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.484994888 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.485018969 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.569302082 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.569370985 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.569504023 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.571240902 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.571325064 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.571876049 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.578996897 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.579024076 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.579039097 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.579045057 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.580365896 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.580393076 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.580530882 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.580538988 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.581456900 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.581510067 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.581563950 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.584043026 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.584064960 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.584090948 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.584096909 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.590529919 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.590570927 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.590717077 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.591418982 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.591439962 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.593183994 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.593224049 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.593302965 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.593899012 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.593913078 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.594822884 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.594883919 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.595062971 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.595351934 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.595383883 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.595700979 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.595717907 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.595766068 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.595779896 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.595787048 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.599864960 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.599895000 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.600091934 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.600107908 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.600126028 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.600708961 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.600720882 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.621761084 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.621824980 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.621938944 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.622253895 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.622282028 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.622308969 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.622314930 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.627324104 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.627367973 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:48.627449989 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.627727032 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:48.627743006 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.334336042 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.335158110 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.335169077 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.336379051 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.336383104 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.336929083 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.337549925 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.337832928 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.337857962 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.338469982 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.338475943 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.338486910 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.339004040 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.339010000 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.339580059 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.339585066 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.340277910 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.340301037 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.341216087 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.341224909 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.362082005 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.362832069 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.362844944 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.363760948 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.363768101 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.477071047 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.477142096 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.477190018 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.477371931 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.477389097 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.477401972 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.477407932 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.477987051 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.478225946 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.478460073 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.479022980 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.479022980 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.479038000 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.479047060 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.480870008 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.480916023 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.480989933 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.481030941 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.481070042 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.481123924 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.481285095 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.481298923 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.481379032 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.481380939 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.481389999 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.482848883 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.482903004 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.482933044 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.482938051 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.482948065 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.482952118 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.485388994 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.485416889 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.485475063 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.485604048 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.485614061 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.495539904 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.495594978 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.495716095 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.495789051 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.495789051 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.495800018 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.495807886 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.496809959 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.496866941 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.496933937 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.496994972 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.496999979 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.497159958 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.497170925 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.498441935 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.498461008 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.498526096 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.498631001 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.498636961 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.499280930 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.499332905 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:49.499389887 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.499536037 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:49.499551058 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.217415094 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.217931986 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.217961073 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.218502998 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.218514919 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.249248981 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.249732971 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.249800920 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.250302076 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.250313044 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.250808954 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.251400948 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.251424074 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.251811981 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.251820087 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.259577990 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.260030031 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.260040045 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.260756969 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.260762930 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.283178091 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.284202099 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.284223080 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.284843922 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.284851074 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.366527081 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.366592884 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.366642952 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.366911888 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.366930962 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.366942883 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.366949081 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.370032072 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.370050907 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.370121956 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.370377064 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.370383024 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.477906942 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.478023052 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.478086948 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.478153944 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.478277922 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.478286028 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.478307009 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.478321075 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.478327990 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.478360891 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.478725910 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.478725910 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.478740931 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.478750944 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481218100 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481226921 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481426001 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481439114 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481463909 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481564999 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481586933 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481616974 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481674910 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481681108 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481692076 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481780052 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481789112 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481893063 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481903076 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.481914043 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.481920004 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.482693911 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.483436108 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.483505011 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.483623981 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.483634949 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.483648062 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.483653069 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.483860970 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.483875036 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.484002113 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.484385014 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.484397888 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.485553980 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.485575914 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:50.485754013 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.485863924 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:50.485872984 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.102459908 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.102946997 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.102966070 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.103507042 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.103513956 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.207380056 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.208267927 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.208306074 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.209753036 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.209774971 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.211936951 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.212603092 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.212620974 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.213066101 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.213072062 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.214910984 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.215400934 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.215434074 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.215775013 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.215780020 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.216758013 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.217058897 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.217077971 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.217483044 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.217488050 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.236937046 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.237322092 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.237385035 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.237421036 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.237432003 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.237442017 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.237447023 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.240359068 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.240389109 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.240446091 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.240633965 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.240647078 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.334362984 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.334769011 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.334851027 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.334898949 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.334908009 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.334933996 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.334939003 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.337662935 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.337677002 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.337750912 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.337884903 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.337893963 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.352617979 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.352679968 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.352790117 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.353065968 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.353072882 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353080034 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.353089094 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353105068 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353162050 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353208065 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.353395939 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.353414059 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353425026 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.353430986 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353571892 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353631973 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.353693008 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.354326963 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.354334116 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.356954098 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.356966972 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.357084990 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.357096910 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.357109070 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.357289076 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.357490063 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.357498884 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.357559919 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.357570887 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.358087063 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.358093977 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.358172894 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.358279943 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.358288050 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.964047909 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.964699984 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.964725018 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:51.965301037 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:51.965306044 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.088413000 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.089066982 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.089090109 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.089595079 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.089601994 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.089698076 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.090101957 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.090111017 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.090421915 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.090425968 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.091691971 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.091871023 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.092087984 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.092122078 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.092142105 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.092148066 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.092154026 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.093106985 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.093580961 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.093592882 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.094099045 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.094105005 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.094305038 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.094928980 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.094939947 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.095343113 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.095346928 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.095379114 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.095412970 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.095529079 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.095678091 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.095689058 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.220455885 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.220511913 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.220575094 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.220861912 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.220876932 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.220892906 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.220897913 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.221460104 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.221530914 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.221718073 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.222114086 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.222114086 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.222126961 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.222136021 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.222537994 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.222610950 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.222681046 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.223073006 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.223079920 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.223108053 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.223112106 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.224942923 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.224982977 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.225169897 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226094961 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226114035 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.226203918 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226358891 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226358891 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226375103 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.226389885 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.226507902 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.226563931 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226582050 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226582050 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226584911 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.226604939 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.226654053 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.226775885 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.226775885 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.228781939 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.228816986 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.228882074 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.228993893 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.229006052 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.229882956 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.229893923 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.846694946 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.847395897 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.847412109 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.848053932 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.848058939 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.951229095 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.952034950 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.952044010 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.953438044 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.954046965 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.954062939 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.955131054 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.955142975 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.955719948 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.955725908 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.956548929 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.957329988 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.957338095 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.958595037 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.958600044 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.965836048 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.966342926 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.966370106 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.966866970 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.966875076 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.980417967 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.980516911 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.981024981 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.981851101 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.981869936 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.981880903 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.981888056 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.989249945 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.989290953 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:52.989366055 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.989697933 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:52.989712954 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.079982042 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.080183983 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.080260992 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.080579996 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.080579996 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.080600023 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.080605030 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.086688042 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.086762905 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.087002993 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.087990046 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.088002920 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.088262081 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.088648081 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.088697910 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.093466043 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.093533039 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.093683958 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.093835115 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.093852997 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.095850945 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.095884085 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.097389936 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.097764969 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.097830057 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.099157095 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.099200964 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.099455118 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.102138996 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.102159023 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.102246046 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.102494955 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.102514982 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.103395939 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.103414059 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.103425980 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.103431940 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.107630014 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.107640982 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.110987902 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.111020088 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.111084938 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.111460924 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.111474037 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.732392073 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.735457897 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.735476971 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.736344099 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.736358881 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.837317944 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.838124037 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.838145971 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.838278055 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.838891029 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.838896036 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.839566946 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.839598894 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.840318918 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.840332031 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.852267981 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.852515936 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.854166985 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.854180098 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.855330944 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.855338097 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.855449915 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.855472088 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.855899096 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.855906010 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.867453098 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.867923021 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.868031025 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.868108988 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.868123055 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.868144989 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.868150949 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.873521090 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.873563051 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.873667002 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.874196053 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.874207020 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.970254898 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.970642090 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.970843077 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.970958948 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.970958948 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.970972061 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.970979929 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.974334955 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.974550962 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.974627018 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.975270033 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.975310087 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.975416899 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.976128101 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.976149082 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.976160049 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.976167917 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.977982998 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.977994919 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.986496925 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.986602068 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.986727953 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.987199068 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.987210035 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.992640018 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.992676020 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.992816925 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.993626118 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.993633986 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.994820118 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.994975090 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.995189905 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.995810986 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.995842934 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.995923996 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.996268034 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.996282101 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.996536016 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.996565104 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:53.996665001 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:53.996679068 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.000835896 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.000876904 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.001034021 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.001245975 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.001257896 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.613934994 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.614940882 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.614959955 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.616082907 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.616097927 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.723352909 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.724431038 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.724448919 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.729005098 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.729012966 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.736663103 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.737303972 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.737883091 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.737891912 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.738529921 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.738534927 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.738996029 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.739020109 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.739767075 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.739773035 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.747857094 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.748033047 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.748087883 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.748358965 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.748385906 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.748462915 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.748470068 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.748836040 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.749385118 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.749397993 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.751636982 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.751641035 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.754008055 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.754039049 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.754091024 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.754391909 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.754400969 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.859364986 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.859653950 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.859729052 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.860121012 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.860140085 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.860162973 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.860169888 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.866823912 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.866858959 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.866935968 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.867144108 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.867155075 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.873065948 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.873070955 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.873275995 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.873277903 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.873384953 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.873403072 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.873538017 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.873549938 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.876635075 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.876662016 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.876684904 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.876694918 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.880556107 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.880598068 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.880737066 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.883161068 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.883177042 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.883249998 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.883609056 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.883629084 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.884099960 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.884109974 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.885832071 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.885984898 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.886040926 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.886285067 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.886298895 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.886334896 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.886339903 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.889975071 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.890008926 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:54.890069962 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.890238047 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:54.890247107 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.496212006 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.500041962 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.500062943 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.500998974 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.501010895 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.603523016 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.604512930 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.604531050 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.605597973 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.605612040 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.614198923 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.615329027 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.615339041 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.616581917 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.616589069 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.621490002 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.622482061 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.622509956 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.623564005 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.623580933 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.630247116 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.630630016 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.631702900 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.632050991 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.632081032 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.632119894 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.632128000 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.634635925 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.635498047 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.635529995 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.636698961 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.636713028 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.640007973 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.640060902 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.640145063 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.640594959 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.640604973 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.747724056 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.747803926 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.747919083 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.748051882 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.748176098 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.748195887 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.748209000 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.748214960 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.749013901 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.749177933 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.749222994 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.749228001 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.749238968 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.749242067 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.752149105 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.752187014 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.752209902 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.752213001 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.752340078 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.752347946 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.752456903 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.752469063 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.752516031 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.752531052 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.755718946 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.755872965 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.755932093 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.756705999 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.756717920 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.756726027 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.756731033 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.759392977 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.759409904 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.759633064 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.759752989 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.759764910 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.766578913 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.766674042 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.766729116 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.766899109 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.766908884 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.766913891 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.766918898 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.769402027 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.769434929 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:55.769587994 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.769701004 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:55.769722939 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.225029945 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 26, 2024 00:25:56.232965946 CEST	80	49724	93.184.221.240	192.168.2.4
Oct 26, 2024 00:25:56.233043909 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 26, 2024 00:25:56.275372028 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:56.275432110 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:56.275537014 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:56.276599884 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:56.276628017 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:56.377343893 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.387613058 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.387613058 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.387625933 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.387639046 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.487087011 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.488641024 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.503007889 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.504875898 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.504901886 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.505508900 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.506162882 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.506170988 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.506783009 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.506799936 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.507473946 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.507479906 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.508583069 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.508600950 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.509072065 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.509079933 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.510550022 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.510559082 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.512140036 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.512145042 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.515186071 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.515665054 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.515721083 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.516068935 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.516081095 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.516093016 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.516099930 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.523808002 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.523855925 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.524326086 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.524327040 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.524374962 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.633078098 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.633620024 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.633681059 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.633771896 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.633780003 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.635957003 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.636040926 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.636087894 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.636976957 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.636987925 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.636996984 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.637002945 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.638608932 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.638657093 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.638748884 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.639559031 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.639559031 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.639580011 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.639585018 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.646249056 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.646284103 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.646373987 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.647120953 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.647177935 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.647222042 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.648477077 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.648499012 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.648562908 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.650135994 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.650170088 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.650279999 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.650548935 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.650562048 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.650928020 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.650942087 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.651083946 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.651099920 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.653650045 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.653664112 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.656255007 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.656265020 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:56.656441927 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.656852961 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:56.656862020 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.129375935 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:57.129981995 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:57.129991055 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:57.133771896 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:57.134994030 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:57.135155916 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:25:57.177589893 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:25:57.260482073 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.261297941 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.261320114 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.261696100 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.261717081 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.389163017 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.389329910 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.389403105 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.389432907 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.389667988 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.389667988 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.389678955 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.389687061 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.390084982 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.390103102 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.390297890 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.390626907 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.390634060 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.390897036 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.390907049 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.391304970 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.391309977 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.393388033 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.393410921 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.393490076 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.393662930 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.393672943 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.396984100 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.397341013 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.397361040 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.397835016 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.397841930 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.405163050 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.405577898 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.405596018 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.405966997 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.405972958 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.519947052 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.520030975 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.520272017 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.520272017 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.520796061 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.520808935 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.523087978 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.523156881 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.523236036 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.523458004 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.523458004 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.523469925 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.523483038 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.523761034 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.523793936 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.523899078 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.524238110 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.524249077 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.525633097 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.525660038 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.525798082 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.525976896 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.525985956 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.528995991 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.529642105 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.529711962 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.529738903 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.529751062 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.529762030 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.529767990 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.531907082 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.531925917 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.532002926 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.532104015 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.532114983 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.537307978 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.537589073 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.537753105 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.537753105 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.538006067 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.538014889 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.539830923 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.539840937 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:57.539901972 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.540046930 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:57.540055990 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.129486084 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.130162954 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.130176067 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.130748987 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.130755901 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.257888079 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.258519888 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.258539915 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.259056091 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.259061098 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.262424946 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.262476921 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.262608051 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.262790918 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.262799978 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.262810946 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.262814999 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.266165018 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.266176939 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.266364098 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.266494036 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.266504049 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.274652958 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.275058031 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.275085926 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.275511026 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.275518894 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.276309967 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.276601076 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.276626110 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.276978016 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.276983976 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.295167923 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.295510054 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.295533895 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.295902967 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.295909882 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.388709068 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.389262915 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.389446974 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.389497042 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.389528990 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.389554024 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.389569044 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.392756939 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.392791033 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.393033981 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.393224955 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.393229961 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.404930115 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.405005932 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.405069113 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.405210018 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.405224085 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.405236006 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.405241966 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.407968044 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.407983065 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.408169985 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.408169985 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.408189058 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.409113884 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.409441948 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.409502029 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.409549952 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.409562111 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.409575939 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.409581900 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.411849976 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.411864042 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.411966085 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.412342072 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.412350893 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.429645061 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.429965973 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.430021048 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.430063963 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.430071115 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.430083990 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.430087090 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.432363987 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.432388067 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:58.432442904 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.432591915 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:58.432600975 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.045207024 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.045887947 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.045912981 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.046431065 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.046437979 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.126475096 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.127125978 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.127161980 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.127656937 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.127662897 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.152750015 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.153383017 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.153403044 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.153845072 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.153850079 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.189273119 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.189851999 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.189894915 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.189908981 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.190026045 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.190094948 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.190392971 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.190392971 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.190402031 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.190408945 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.190418005 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.190423012 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.194160938 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.194211960 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.194303989 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.194497108 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.194510937 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.198796988 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.199132919 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.199160099 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.199543953 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.199552059 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.261755943 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.261955976 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.262074947 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.262156010 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.262175083 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.262187958 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.262193918 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.265443087 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.265474081 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.265579939 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.265738964 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.265749931 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.290859938 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.291047096 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.291100025 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.291192055 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.291192055 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.291201115 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.291209936 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.293889046 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.293935061 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.294084072 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.294223070 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.294235945 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.325815916 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.325905085 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.325958967 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.326105118 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.326118946 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.326148033 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.326153040 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.328506947 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.328527927 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.328649044 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.328807116 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.328815937 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.334388018 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.334642887 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.334705114 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.334738016 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.334749937 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.334755898 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.334763050 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.337069988 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.337088108 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.337263107 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.337347984 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.337357998 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.948821068 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.949389935 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.949414015 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:25:59.950128078 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:25:59.950135946 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.025927067 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.026479959 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.026503086 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.026998997 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.027004004 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.084800959 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.085310936 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.085330963 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.085901022 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.085906982 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.091156006 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.091209888 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.091362953 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.091434956 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.091509104 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.091527939 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.091552973 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.091558933 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.094803095 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.094835997 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.095076084 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.095076084 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.095145941 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.101933956 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.102298021 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.102314949 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.102794886 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.102804899 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.156151056 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.156533003 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.156594038 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.156651020 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.156672955 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.156701088 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.156707048 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.159501076 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.159518003 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.159635067 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.159704924 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.159709930 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.217236996 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.217261076 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.217329979 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.217356920 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.217375040 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.217405081 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.217526913 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.217663050 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.217681885 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.217699051 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.217705011 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.220990896 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.221025944 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.221131086 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.221472979 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.221483946 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.237932920 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.237946987 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.237998962 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.238013983 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.238064051 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.238281965 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.238315105 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.238346100 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.238359928 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.241173029 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.241205931 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.241420031 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.241476059 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.241491079 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.406409025 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.407066107 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.407131910 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.407574892 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.407591105 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.543723106 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.543916941 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.543997049 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.544112921 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.544145107 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.544172049 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.544188023 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.547547102 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.547585011 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.547787905 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.547981977 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.547993898 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.865892887 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.869863987 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.869915009 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.871454954 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.871469975 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.940113068 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.955327034 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.955354929 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.956445932 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.956451893 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.967542887 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.968245983 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.968255997 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.969120979 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.969130993 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.972913027 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.973439932 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.973464012 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:00.974322081 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:00.974328995 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.004261971 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.004317999 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.004379034 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.004396915 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.004453897 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.004515886 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.005218983 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.005230904 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.005278111 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.005284071 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.012331963 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.012367964 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.012855053 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.012855053 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.012888908 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.089556932 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.089637995 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.089879990 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.090473890 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.090487957 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.090533018 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.090538979 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.096266031 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.096285105 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.096487045 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.096776962 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.096786976 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.097945929 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.098050117 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.098113060 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.098345995 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.098362923 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.098386049 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.098393917 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.102973938 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.103012085 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.103116989 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.103296041 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.103311062 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.106102943 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.106271029 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.106334925 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.106679916 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.106693029 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.106699944 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.106704950 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.110795021 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.110805035 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.110949039 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.111124992 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.111136913 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.289633989 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.290385962 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.290394068 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.291203022 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.291208029 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.422314882 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.422627926 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.422677040 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.422967911 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.422977924 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.423019886 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.423026085 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.428678036 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.428724051 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.428827047 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.429018974 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.429030895 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.833724976 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.834359884 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.834374905 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.835119009 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.835130930 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.938299894 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.939116001 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.939126015 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.939440966 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.939445972 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.941812038 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.942394972 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.942401886 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.942534924 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.946284056 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.946289062 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.946544886 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.946557045 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.947026968 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.947032928 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.968847990 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.969037056 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.969157934 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.983990908 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.984011889 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.984071016 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.984077930 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.988270044 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.988312960 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:01.988440990 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.988713980 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:01.988734007 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.070452929 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.070637941 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.070755005 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.072828054 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.072839975 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.072849989 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.072854996 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.076515913 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.076540947 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.076656103 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.076829910 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.076843023 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.078159094 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.078238010 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.078286886 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.078418970 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.078418970 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.078435898 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.078444958 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.079318047 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.079418898 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.079474926 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.079911947 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.079916954 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.079927921 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.079931974 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.081661940 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.081693888 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.081768036 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.083064079 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.083074093 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.083237886 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.083242893 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.083257914 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.083621025 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.083632946 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.173999071 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.179928064 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.179956913 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.181114912 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.181126118 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.311328888 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.311429977 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.311530113 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.312206984 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.312221050 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.312235117 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.312241077 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.317682981 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.317703009 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.317883968 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.343960047 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.343974113 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.862643957 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.863746881 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.863758087 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.865609884 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.865616083 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.982542038 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.983263969 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.983274937 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.983963966 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.983969927 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.984365940 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.985014915 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.985024929 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.985913038 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.985917091 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.988320112 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.988969088 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.988977909 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.990184069 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.990191936 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.992503881 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.992784023 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.992928028 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.993067026 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.993076086 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.993088961 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.993093014 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.997066975 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.997095108 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:02.997251987 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.997359991 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:02.997370958 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.103835106 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.105128050 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.105155945 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.105465889 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.105473042 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.113673925 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.114181042 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.114232063 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.114283085 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.114346027 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.114356041 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.114373922 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.114378929 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.117296934 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.117347956 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.117583990 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.117583990 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.117626905 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.118046045 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.118076086 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.118119001 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.118122101 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.118184090 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.118244886 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.118248940 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.118258953 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.118263006 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.119724989 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.121731997 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.121814966 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.121814966 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.121901989 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.121905088 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.121916056 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.121932030 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.122138023 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.122138023 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.122159958 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.125904083 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.125926971 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.126136065 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.126136065 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.126154900 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.238024950 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.238163948 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.238218069 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.238457918 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.238457918 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.238476038 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.238486052 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.241894007 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.241931915 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.242001057 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.242186069 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.242199898 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.734287977 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.735392094 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.735403061 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.736632109 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.736637115 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.856851101 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.857865095 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.857877970 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.859009027 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.859014034 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.859749079 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.860363007 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.860374928 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.861038923 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.861056089 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.867021084 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.867089987 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.867178917 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.867506027 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.867518902 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.867558956 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.867563963 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.874557972 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.874594927 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.874738932 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.875009060 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.875022888 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.875718117 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.876425982 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.876434088 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.877177000 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.877181053 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.976655960 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.977370024 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.977390051 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.978514910 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.978522062 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.988286018 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.988395929 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.988445044 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.988518953 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.988840103 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.988853931 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.988866091 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.988882065 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.993721008 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.993789911 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.993810892 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.993838072 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.993850946 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.993896008 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.994338989 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.994349003 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.994538069 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.994538069 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.994550943 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.994561911 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.999227047 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.999269962 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:03.999367952 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.999670029 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:03.999686956 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.008486032 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.008553982 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.008615017 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.008925915 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.008938074 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.013329029 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.013358116 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.013448954 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.013693094 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.013708115 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.117301941 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.117563963 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.117685080 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.117964029 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.117969036 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.117981911 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.117985964 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.122517109 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.122543097 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.122664928 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.122931004 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.122946024 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.621301889 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.621901035 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.621932983 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.622514963 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.622520924 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.729964018 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.734536886 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.734565973 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.735027075 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.735033035 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.736248016 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.736604929 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.736622095 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.737025023 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.737030029 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.744152069 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.744533062 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.744565010 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.744931936 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.744937897 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.756736994 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.756906033 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.757004023 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.757004023 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.757025957 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.757034063 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.760003090 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.760044098 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.760231972 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.760401011 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.760423899 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.863056898 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.863087893 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.863132000 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.863137960 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.863181114 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.863451004 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.863465071 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.863480091 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.863488913 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.866997957 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.867019892 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.867144108 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.867340088 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.867350101 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.870919943 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.871140957 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.871200085 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.871249914 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.871265888 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.871277094 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.871284008 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.871592045 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.872124910 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.872136116 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.872591972 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.872598886 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.873883963 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.873912096 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.874037981 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.874183893 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.874196053 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.878673077 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.878696918 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.878741026 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.878747940 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.878787994 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.878976107 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.878990889 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.879004002 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.879009008 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.881783962 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.881804943 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:04.881860971 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.881995916 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:04.882004976 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.007719040 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.007786989 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.008025885 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.008100033 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.008114100 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.011415958 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.011435032 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.011589050 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.011804104 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.011816025 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.489281893 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.489943027 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.489972115 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.490549088 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.490555048 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.609632015 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.610610962 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.610632896 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.610795975 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.610801935 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.620153904 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.620826006 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.620846033 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.621262074 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.621267080 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.622226954 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.622378111 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.622500896 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.622648954 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.622665882 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.622677088 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.622684002 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.626535892 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.626559019 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.626626015 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.626759052 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.626770973 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.630312920 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.630762100 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.630774975 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.631253004 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.631257057 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.748096943 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.748722076 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.748740911 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.749167919 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.749174118 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.751069069 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.751173019 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.751266956 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.751276016 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.751296997 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.751360893 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.751472950 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.751482964 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.751504898 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.751509905 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.754894018 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.754936934 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.755203962 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.755753994 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.755769014 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.757160902 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.757301092 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.757366896 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.757524014 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.757524014 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.757539034 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.757548094 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.760670900 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.760703087 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.760951042 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.761152029 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.761166096 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.767013073 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.767124891 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.767247915 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.767541885 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.767554045 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.767560005 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.767565966 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.770374060 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.770414114 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.770607948 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.770747900 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.770764112 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.880414963 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.880611897 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.880920887 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.880920887 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.880948067 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.880954981 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.884074926 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.884107113 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:05.884171009 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.884351969 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:05.884366035 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.447479010 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.448153973 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.448178053 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.448662996 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.448668003 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.668776989 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.668900967 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.669508934 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.669532061 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.669652939 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.669680119 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.670133114 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.670142889 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.670298100 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.670304060 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.673877001 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.674447060 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.674453974 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:06.674911976 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:06.674916029 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.205267906 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:26:07.205349922 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:26:07.205414057 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:26:07.206007957 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.206113100 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.206231117 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.206460953 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.206475019 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.206486940 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.206492901 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.210495949 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.210526943 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.210586071 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.210791111 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.210803032 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.211916924 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.212027073 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.212084055 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.212161064 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.212176085 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.212182045 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.212188005 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.212862968 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.212996006 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.213651896 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.213676929 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.213680029 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.213717937 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.213727951 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.213753939 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.213953972 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.213960886 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.213979006 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.213984013 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.214025021 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.214041948 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.214055061 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.214061022 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.216458082 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.216505051 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.216586113 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.216777086 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.216800928 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.217784882 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.217804909 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.217952967 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.217962980 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.218019962 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.218161106 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.218162060 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.218183041 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.218184948 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.218189001 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.631237984 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.631928921 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.631949902 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.632450104 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.632456064 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.762989044 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.763130903 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.763288021 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.763396025 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.763407946 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.763417959 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.763423920 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.766843081 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.766877890 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.766962051 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.767190933 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.767206907 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.898156881 CEST	49825	443	192.168.2.4	142.250.186.68
Oct 26, 2024 00:26:07.898165941 CEST	443	49825	142.250.186.68	192.168.2.4
Oct 26, 2024 00:26:07.948471069 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.949067116 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.949093103 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.949573040 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.949590921 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.960633993 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.961182117 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.961193085 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.961678982 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.961684942 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.962110996 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.962400913 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.962414980 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.962779045 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.962784052 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.971581936 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.972009897 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.972027063 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:07.972289085 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:07.972294092 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.081691027 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.081765890 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.081871986 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.081888914 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.081911087 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.082019091 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.082173109 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.082173109 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.082187891 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.082195997 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.086035013 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.086072922 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.086165905 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.086337090 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.086349964 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.093732119 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.093940973 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.094029903 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.094079018 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.094079018 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.094094038 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.094104052 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.096077919 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.096250057 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.097085953 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.097088099 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.097125053 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.097151041 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.097151041 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.097166061 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.097173929 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.097245932 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.097335100 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.097351074 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.099306107 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.099350929 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.099423885 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.099812031 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.099824905 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.106662989 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.106751919 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.106818914 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.106965065 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.106976032 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.106988907 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.106993914 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.109230995 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.109265089 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.109333992 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.109453917 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.109468937 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.516467094 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.517158985 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.517182112 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.517694950 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.517709970 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.650988102 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.651021957 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.651076078 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.651082039 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.651417971 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.651417971 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.651417971 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.654561043 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.654582977 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.654743910 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.654917955 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.654932022 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.825562000 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.826586008 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.826586008 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.826600075 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.826617002 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.857270956 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.859745026 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.865206957 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.865233898 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.865237951 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.865253925 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.865946054 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.865951061 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.866080999 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.866089106 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.866592884 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.866599083 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.870271921 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.870632887 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.870659113 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.873950958 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.873958111 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.955992937 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.956150055 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.956351995 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.956446886 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.956446886 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.956461906 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.956473112 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.970057964 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.970113993 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.970272064 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.970545053 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.970573902 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.990480900 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.990861893 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.991245031 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.991298914 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.991298914 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.991317034 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.991324902 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.992280960 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.992319107 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.992377043 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.992686987 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.992686987 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.993993044 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.994009972 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.994914055 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.994914055 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.994946957 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.994960070 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.995045900 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.995055914 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.995168924 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.995170116 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:08.995182037 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:08.995194912 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.001996994 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.002053976 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.002111912 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.002181053 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.002373934 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.002373934 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.002393007 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.002433062 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.002446890 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.004795074 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.004822969 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.005026102 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.005026102 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.005058050 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.430882931 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.431483984 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.431499958 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.432074070 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.432080984 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.568598032 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.568680048 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.568747997 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.569004059 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.569004059 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.569020033 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.569024086 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.572621107 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.572654963 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.572938919 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.572982073 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.572989941 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.707658052 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.708261013 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.708286047 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.708945036 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.708950996 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.739445925 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.739665031 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.740331888 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.740360975 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.740463972 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.740483999 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.741063118 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.741143942 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.741174936 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.741183043 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.772156954 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.772746086 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.772763968 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.773211002 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.773219109 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.838419914 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.838485003 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.838583946 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.838598013 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.838649988 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.838851929 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.838871956 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.838886976 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.838893890 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.842199087 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.842219114 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.842288017 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.842434883 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.842443943 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.870052099 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.870127916 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.870179892 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.870373011 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.870385885 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.870464087 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.870471954 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.873208046 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.873229980 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.873260975 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.873377085 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.873440981 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.873470068 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.873543978 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.873564005 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.873575926 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.873594046 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.873601913 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.873802900 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.873812914 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.875837088 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.875863075 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.876156092 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.876287937 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.876302958 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.907865047 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.907929897 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.907994032 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.908173084 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.908190966 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.908221960 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.908229113 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.910779953 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.910809994 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:09.910929918 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.911130905 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:09.911143064 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.337647915 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.338463068 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.338498116 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.339189053 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.339195967 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.482254982 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.482399940 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.482589006 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.482702971 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.482702971 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.482728004 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.482742071 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.486432076 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.486454964 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.486531019 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.486730099 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.486745119 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.567609072 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.568301916 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.568317890 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.568891048 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.568896055 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.608098030 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.608897924 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.608912945 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.609226942 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.609231949 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.615403891 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.615840912 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.615854979 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.616323948 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.616337061 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.656080961 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.656894922 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.656894922 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.656905890 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.656918049 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.699132919 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.699301958 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.699398994 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.699538946 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.699553013 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.699592113 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.699599981 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.702991009 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.703031063 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.703249931 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.703315973 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.703320980 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.739614964 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.739681959 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.739780903 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.740283966 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.740283966 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.740297079 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.740308046 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.743274927 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.743303061 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.743489027 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.743531942 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.743542910 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.746526003 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.746949911 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.746988058 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.747029066 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.747081041 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.747081041 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.747795105 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.747807980 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.749396086 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.749448061 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.749655008 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.749768019 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.749795914 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.786554098 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.786623955 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.786741018 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.786792040 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.786864996 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.786864996 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.787276030 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.787285089 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.790023088 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.790046930 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:10.790157080 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.790337086 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:10.790349960 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.372526884 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.373692989 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.373692989 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.373713017 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.373720884 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.487881899 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.488723993 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.488743067 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.489237070 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.489243984 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.499413013 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.500276089 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.500276089 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.500297070 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.500304937 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.507411003 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.507563114 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.507766008 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.507808924 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.507808924 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.507819891 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.507827997 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.510736942 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.510757923 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.511001110 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.511001110 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.511029005 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.515429020 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.516017914 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.516027927 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.516191959 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.516196966 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.520195961 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.520917892 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.520919085 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.520947933 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.520958900 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.626225948 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.626313925 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.626416922 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.626874924 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.626874924 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.626900911 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.626918077 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.630112886 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.630136013 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.630239964 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.630588055 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.630604029 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.634845018 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.634906054 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.634951115 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.635018110 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.635211945 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.635211945 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.635449886 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.635454893 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.637459993 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.637479067 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.637721062 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.637721062 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.637749910 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.645936012 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.646404028 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.646661043 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.646661043 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.646661043 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.649024963 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.649168968 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.649202108 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.649223089 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.649250984 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.649250984 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.649302006 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.649305105 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.649307966 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.649949074 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.649960995 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.651345968 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.651360989 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 26, 2024 00:26:11.651700020 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.651828051 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 26, 2024 00:26:11.651840925 CEST	443	49909	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 00:24:51.464977980 CEST	53	65226	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:51.485668898 CEST	53	59382	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:52.869654894 CEST	53	64019	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:53.158072948 CEST	50559	53	192.168.2.4	1.1.1.1
Oct 26, 2024 00:24:53.158199072 CEST	55479	53	192.168.2.4	1.1.1.1
Oct 26, 2024 00:24:53.195247889 CEST	53	55479	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:53.196767092 CEST	53	50559	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:53.993433952 CEST	64861	53	192.168.2.4	1.1.1.1
Oct 26, 2024 00:24:53.993550062 CEST	54846	53	192.168.2.4	1.1.1.1
Oct 26, 2024 00:24:54.003732920 CEST	53	54846	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:54.033210993 CEST	53	64861	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:56.227057934 CEST	61544	53	192.168.2.4	1.1.1.1
Oct 26, 2024 00:24:56.227513075 CEST	57233	53	192.168.2.4	1.1.1.1
Oct 26, 2024 00:24:56.236592054 CEST	53	61544	1.1.1.1	192.168.2.4
Oct 26, 2024 00:24:56.237001896 CEST	53	57233	1.1.1.1	192.168.2.4
Oct 26, 2024 00:25:07.840012074 CEST	138	138	192.168.2.4	192.168.2.255
Oct 26, 2024 00:25:10.062093019 CEST	53	60821	1.1.1.1	192.168.2.4
Oct 26, 2024 00:25:28.780638933 CEST	53	52746	1.1.1.1	192.168.2.4
Oct 26, 2024 00:25:51.218857050 CEST	53	49171	1.1.1.1	192.168.2.4
Oct 26, 2024 00:25:51.577068090 CEST	53	60791	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 26, 2024 00:24:53.158072948 CEST	192.168.2.4	1.1.1.1	0xe2c8	Standard query (0)	www.ynvgroup.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:53.158199072 CEST	192.168.2.4	1.1.1.1	0x6440	Standard query (0)	www.ynvgroup.com	65	IN (0x0001)	false
Oct 26, 2024 00:24:53.993433952 CEST	192.168.2.4	1.1.1.1	0xe7a3	Standard query (0)	www.ynvgroup.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:53.993550062 CEST	192.168.2.4	1.1.1.1	0xc4c8	Standard query (0)	www.ynvgroup.com	65	IN (0x0001)	false
Oct 26, 2024 00:24:56.227057934 CEST	192.168.2.4	1.1.1.1	0xedbb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:56.227513075 CEST	192.168.2.4	1.1.1.1	0xce8	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 26, 2024 00:24:53.195247889 CEST	1.1.1.1	192.168.2.4	0x6440	No error (0)	www.ynvgroup.com	g76u52zw8ijy.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:24:53.196767092 CEST	1.1.1.1	192.168.2.4	0xe2c8	No error (0)	www.ynvgroup.com	g76u52zw8ijy.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:24:53.196767092 CEST	1.1.1.1	192.168.2.4	0xe2c8	No error (0)	g76u52zw8ijy.wpeproxy.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:53.196767092 CEST	1.1.1.1	192.168.2.4	0xe2c8	No error (0)	g76u52zw8ijy.wpeproxy.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:54.003732920 CEST	1.1.1.1	192.168.2.4	0xc4c8	No error (0)	www.ynvgroup.com	g76u52zw8ijy.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:24:54.033210993 CEST	1.1.1.1	192.168.2.4	0xe7a3	No error (0)	www.ynvgroup.com	g76u52zw8ijy.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:24:54.033210993 CEST	1.1.1.1	192.168.2.4	0xe7a3	No error (0)	g76u52zw8ijy.wpeproxy.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:54.033210993 CEST	1.1.1.1	192.168.2.4	0xe7a3	No error (0)	g76u52zw8ijy.wpeproxy.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:56.236592054 CEST	1.1.1.1	192.168.2.4	0xedbb	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:24:56.237001896 CEST	1.1.1.1	192.168.2.4	0xce8	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 26, 2024 00:25:04.072537899 CEST	1.1.1.1	192.168.2.4	0x5e74	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:25:04.072537899 CEST	1.1.1.1	192.168.2.4	0x5e74	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:04.072537899 CEST	1.1.1.1	192.168.2.4	0x5e74	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:05.478199959 CEST	1.1.1.1	192.168.2.4	0xbb90	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:25:05.478199959 CEST	1.1.1.1	192.168.2.4	0xbb90	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:09.805206060 CEST	1.1.1.1	192.168.2.4	0x91b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:09.805206060 CEST	1.1.1.1	192.168.2.4	0x91b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:25.155175924 CEST	1.1.1.1	192.168.2.4	0xef63	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:25.155175924 CEST	1.1.1.1	192.168.2.4	0xef63	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:43.873677015 CEST	1.1.1.1	192.168.2.4	0x8d08	No error (0)	windowsupdatebg.s.llnwi.net		87.248.202.1	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:25:43.930996895 CEST	1.1.1.1	192.168.2.4	0x612	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:25:43.930996895 CEST	1.1.1.1	192.168.2.4	0x612	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 26, 2024 00:26:04.688729048 CEST	1.1.1.1	192.168.2.4	0x4fef	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 00:26:04.688729048 CEST	1.1.1.1	192.168.2.4	0x4fef	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

www.ynvgroup.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	141.193.213.21	80	3612	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 00:24:53.209961891 CEST	431	OUT	GET / HTTP/1.1 Host: www.ynvgroup.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 26, 2024 00:24:53.990919113 CEST	464	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 25 Oct 2024 22:24:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://www.ynvgroup.com/ CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d859e8ffbce2e71-DFW alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 26, 2024 00:25:39.004293919 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:24:57 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 22:24:57 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=152405 Date: Fri, 25 Oct 2024 22:24:57 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:24:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 22:24:59 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=152404 Date: Fri, 25 Oct 2024 22:24:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 22:24:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:44 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:44 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:44 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 44315f87-b01e-0070-2fac-251cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222544Z-r197bdfb6b48pcqqxhenwd2uz800000001wg000000009tr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:44 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 22:25:44 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 22:25:45 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:46 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:46 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 106bf0d0-c01e-0066-1446-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222546Z-r197bdfb6b4tq6ldv3s2dcykm800000003r000000000d896 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:46 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:46 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:46 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222546Z-16849878b78nx5sne3fztmu6xc000000024g00000000ak7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:46 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:46 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:46 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:46 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2f084f0e-501e-0029-2021-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222546Z-17c5cb586f6wmhkn5q6fu8c5ss00000000cg000000000ka8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:46 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:46 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:46 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222546Z-16849878b785jrf8dn0d2rczaw000000026000000000x4u1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:46 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:46 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:46 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222546Z-16849878b78q4pnrt955f8nkx800000009q000000000hw3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:46 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:47 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:47 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222547Z-16849878b78fmrkt2ukpvh9wh400000009u0000000009f3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:47 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:47 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:47 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 96753eec-301e-0000-2f2c-26eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222547Z-15b8d89586fst84k5f3z220tec0000000gr000000000e7fu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:47 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:47 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 0c5ae494-501e-0029-6ca4-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222547Z-16849878b78p49s6zkwt11bbkn00000000vg000000006s97 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:47 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222547Z-16849878b78fssff8btnns3b1400000001c000000000pkdz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:47 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: d919e2dc-e01e-001f-153d-261633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222547Z-r197bdfb6b4b4pw6nr8czsrctg00000001t0000000008msb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:48 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:48 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8384fc49-f01e-00aa-06d4-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222548Z-17c5cb586f6wnfhvhw6gvetfh400000000e0000000006zut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:48 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:48 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:48 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 82d491bf-801e-0048-1e3d-26f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222548Z-17c5cb586f6lxnvg801rcb3n8n00000000ug00000000exf7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:48 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:48 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:48 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222548Z-16849878b78q4pnrt955f8nkx800000009tg000000003b51 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:48 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:48 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222548Z-16849878b782d4lwcu6h6gmxnw00000000sg00000000ncdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:48 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:48 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222548Z-r197bdfb6b4jlq9hb8xf0re6t4000000012000000000p3yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:48 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:49 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222549Z-16849878b78km6fmmkbenhx76n00000000cg000000001bb0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:49 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222549Z-17c5cb586f6lxnvg801rcb3n8n00000000xg000000005xk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:49 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:49 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fc173041-601e-0097-79ad-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222549Z-15b8d89586f4zwgbgswvrvz4vs000000028000000000gxnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:49 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:49 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:49 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222549Z-16849878b78fssff8btnns3b1400000001h0000000000th9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:49 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:49 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:49 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222549Z-15b8d89586fxdh48qknu9dqk2g0000000560000000002h12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:49 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:50 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222550Z-16849878b782d4lwcu6h6gmxnw00000000vg000000008hew x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:50 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222550Z-16849878b786lft2mu9uftf3y400000002b000000000nmgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:50 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:50 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6b700fd2-301e-005d-5b5a-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222550Z-17c5cb586f67p8ffw0hbk5rahw00000003bg00000000c2kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:50 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:50 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222550Z-16849878b78j5kdg3dndgqw0vg00000002vg00000000dxv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:50 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:50 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: a2903e96-401e-00ac-3034-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222550Z-15b8d89586flspj6y6m5fk442w00000006zg000000004src x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:50 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:51 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:51 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 06b72246-101e-0079-2a0d-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222551Z-16849878b78hz7zj8u0h2zng140000000a000000000031b4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:51 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:51 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222551Z-15b8d89586f8l5961kfst8fpb00000000bh000000000d6ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:51 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:51 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 43148558-a01e-0098-6adf-258556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222551Z-15b8d89586f4zwgbgswvrvz4vs000000028g00000000g3qy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:51 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:51 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222551Z-r197bdfb6b466qclztvgs64z1000000002h000000000kua5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:51 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:51 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222551Z-16849878b78x6gn56mgecg60qc00000002zg00000000aruf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:51 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:51 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 06960f57-101e-000b-0c20-265e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-r197bdfb6b4hsj5bywyqk9r2xw00000002h0000000007csc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:52 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d2baa5f3-801e-0078-3ff3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-r197bdfb6b466qclztvgs64z1000000002n000000000a1eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-16849878b78k8q5pxkgux3mbgg00000009qg00000000trwe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:52 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5167a131-c01e-0082-697a-25af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-15b8d89586fvpb597drk06r8fc0000000280000000004na1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-16849878b78p8hrf1se7fucxk8000000020000000000g5hw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-16849878b78x6gn56mgecg60qc00000003100000000049x9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:52 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-16849878b78x6gn56mgecg60qc00000002xg00000000myah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:52 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222552Z-16849878b7867ttgfbpnfxt44s00000000zg00000000k3cw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222553Z-15b8d89586fnsf5zd126eyaetw000000028g00000000d2yf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:52 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:53 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222553Z-17c5cb586f6g6g2sbe6edp75y4000000038g00000000327e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:53 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:53 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222553Z-16849878b78k46f8kzwxznephs00000009r000000000emhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:53 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:53 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 84cbfce0-201e-0071-26f6-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222553Z-r197bdfb6b4c8q4qvwwy2byzsw00000001d00000000049af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:53 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:53 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222553Z-16849878b786fl7gm2qg4r5y7000000001bg00000000pqux x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:53 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:53 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222553Z-16849878b78qg9mlz11wgn0wcc00000000u0000000003x5y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:53 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:53 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:53 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222553Z-15b8d89586f5s5nz3ffrgxn5ac00000001t0000000008a70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:53 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:54 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:54 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222554Z-16849878b785jrf8dn0d2rczaw000000029000000000h5ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:54 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:54 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222554Z-16849878b78j5kdg3dndgqw0vg00000002ug00000000hp3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:54 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 06ffa35a-101e-0079-2528-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222554Z-16849878b78qfbkc5yywmsbg0c00000000vg000000008quh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:54 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222554Z-16849878b7867ttgfbpnfxt44s000000011000000000cqx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:54 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:54 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222554Z-16849878b78qf2gleqhwczd21s00000001ag00000000hv22 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:54 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:55 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 07599615-001e-0082-48f6-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222555Z-17c5cb586f65j4snyp1hqk5z2s00000002fg00000000axn0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:55 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:55 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222555Z-16849878b787wpl5wqkt5731b400000001wg00000000fwbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:55 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:55 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aeab0ab5-201e-006e-7cf3-26bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222555Z-r197bdfb6b4skzzvqpzzd3xetg00000000bg000000001fvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:55 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222555Z-16849878b78fssff8btnns3b1400000001h0000000000u08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:55 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:55 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6113d354-c01e-00a1-29f4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222555Z-15b8d89586flzzks5bs37v2b9000000005e0000000004phw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:56 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:56 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222556Z-16849878b785jrf8dn0d2rczaw000000026000000000x5ez x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:56 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:56 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:56 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222556Z-16849878b78qg9mlz11wgn0wcc00000000n000000000vbm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:56 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:56 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:56 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222556Z-15b8d89586fcvr6p5956n5d0rc00000006x000000000g5t5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:56 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:56 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:56 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 28b65c2d-201e-0003-2d3f-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222556Z-r197bdfb6b48pcqqxhenwd2uz80000000200000000000tpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:56 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:56 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222556Z-15b8d89586f2hk28h0h6zye26c00000003pg000000002w0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:57 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3c45f43b-a01e-00ab-363f-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222557Z-r197bdfb6b4grkz4xgvkar0zcs00000000r0000000009x3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:57 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:57 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222557Z-16849878b78p49s6zkwt11bbkn00000000u000000000e6rk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:57 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:57 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:57 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ab726c5d-b01e-0098-175a-26cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222557Z-17c5cb586f6wnfhvhw6gvetfh400000000n0000000004m3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:57 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:57 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:57 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222557Z-16849878b786lft2mu9uftf3y400000002c000000000hx66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:57 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:57 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:57 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:57 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 42e95d53-401e-0047-28da-268597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222557Z-17c5cb586f62blg5ss55p9d6fn00000001rg00000000308g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:57 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:58 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222558Z-16849878b78wc6ln1zsrz6q9w800000000xg000000001k5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:58 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:58 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:58 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cfffa7b8-401e-0064-673b-2654af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222558Z-15b8d89586fcvr6p5956n5d0rc00000006wg00000000hkak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:25:58 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:58 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222558Z-r197bdfb6b4gx6v9pg74w9f47s00000002v000000000mmve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:58 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222558Z-16849878b78j7llf5vkyvvcehs00000002ag000000001zaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:58 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:58 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222558Z-r197bdfb6b4hdk8h12qtxfwscn00000001w0000000001qu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:58 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:59 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222559Z-16849878b7867ttgfbpnfxt44s000000012g0000000061ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:59 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222559Z-16849878b78x6gn56mgecg60qc00000002xg00000000myr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:59 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:59 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 8a3f5c5e-301e-000c-55dc-26323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222559Z-r197bdfb6b4cz6xrsdncwtgzd40000000sq0000000007kxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:59 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:59 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 12d8ca17-b01e-0098-4df1-26cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222559Z-16849878b78qf2gleqhwczd21s000000018g00000000u59d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:59 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:25:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:25:59 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222559Z-16849878b78wv88bk51myq5vxc00000001e000000000e1m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:25:59 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:25:59 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:00 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222600Z-16849878b78km6fmmkbenhx76n00000000cg000000001by3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:00 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:00 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222600Z-16849878b78hz7zj8u0h2zng1400000009x000000000grcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:00 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:00 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: cd066ebd-401e-0035-394c-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222600Z-r197bdfb6b4grkz4xgvkar0zcs00000000rg000000008u8e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:00 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:00 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222600Z-16849878b78zqkvcwgr6h55x9n00000000f000000000echh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:00 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:00 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222600Z-16849878b78k46f8kzwxznephs00000009s00000000097e4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:00 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:00 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222600Z-15b8d89586f8nxpt6ys645x5v000000002eg0000000007wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:01 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:00 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222600Z-16849878b78s2lqfdex4tmpp7800000009r000000000zgar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:01 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:01 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222601Z-15b8d89586f4zwgbgswvrvz4vs000000029000000000e08v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:01 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:00 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:01 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222601Z-16849878b786fl7gm2qg4r5y7000000001h0000000000h6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:01 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:01 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:01 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 1a403a11-c01e-0082-051c-27af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222601Z-17c5cb586f6hhlf5mrwgq3erx80000000280000000006v58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:01 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:01 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222601Z-16849878b78c5zx4gw8tcga1b400000009tg000000003y9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:01 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:02 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222602Z-17c5cb586f6zrq5bnguxgu7frc00000001u000000000fvmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:02 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:01 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:02 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:02 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222601Z-16849878b78fmrkt2ukpvh9wh400000009vg000000003wd0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:02 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:01 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:02 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222602Z-16849878b785g992cz2s9gk35c00000009xg000000004783 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:02 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:02 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:02 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7136c2ed-601e-0084-41f2-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222602Z-16849878b785jrf8dn0d2rczaw000000027000000000sed5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:02 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:02 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:02 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:02 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 75b99f9f-001e-0079-56b6-2612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222602Z-r197bdfb6b4grkz4xgvkar0zcs00000000q000000000cb06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:02 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:02 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-16849878b78fmrkt2ukpvh9wh400000009ug000000008fqu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:03 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:02 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-16849878b78zqkvcwgr6h55x9n00000000qg000000000hk9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:03 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:02 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-16849878b78hz7zj8u0h2zng1400000009yg0000000095ss x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:03 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:03 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-15b8d89586fvpb597drk06r8fc000000028g000000003z1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:03 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:03 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9cf5c506-801e-0083-443d-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-17c5cb586f64v7xs992vpxwchg000000014000000000asdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:03 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 432a0cec-a01e-0098-6be6-258556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-17c5cb586f6zrq5bnguxgu7frc00000001t000000000n97m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:03 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-r197bdfb6b4kq4j5t834fh90qn0000000d90000000006unz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:03 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:03 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:04 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222603Z-16849878b78x6gn56mgecg60qc00000002wg00000000r71w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:04 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:03 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:04 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:04 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222604Z-16849878b78qg9mlz11wgn0wcc00000000pg00000000pvra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:04 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:04 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:04 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:04 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 219fbbc4-201e-0071-49b1-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222604Z-16849878b786lft2mu9uftf3y400000002ag00000000rxrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:04 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:04 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:04 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:04 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222604Z-16849878b78qg9mlz11wgn0wcc00000000pg00000000pvsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:04 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:04 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:04 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:04 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222604Z-15b8d89586fx2hlt035xdehq580000000h00000000003tm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:04 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:04 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:04 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:04 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 95bc9e61-201e-0051-3bf2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222604Z-15b8d89586ff5l62aha9080wv000000002ag00000000dn29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:04 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:04 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:05 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:04 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222604Z-16849878b787wpl5wqkt5731b400000001xg00000000bmm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:05 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:05 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:05 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:05 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222605Z-16849878b78k8q5pxkgux3mbgg00000009t000000000dgwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:05 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:05 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:05 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:05 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222605Z-16849878b78wv88bk51myq5vxc00000001h0000000000vpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:05 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:05 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:05 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:05 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222605Z-16849878b78c5zx4gw8tcga1b400000009s0000000008yeg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:05 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:05 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:05 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:05 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: a6d15796-a01e-00ab-7f80-269106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222605Z-16849878b78fssff8btnns3b1400000001cg00000000kq0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:05 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:05 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:05 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:05 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: dc5d0bf8-001e-008d-6cee-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222605Z-r197bdfb6b42rt68rzg9338g1g00000002ag00000000767y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:05 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:06 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:07 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:07 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: c2bf3a2c-401e-0047-4d9c-248597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222607Z-15b8d89586fwzdd8urmg0p1ebs0000000bkg000000003bzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:07 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:06 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:07 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:07 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222607Z-16849878b785g992cz2s9gk35c00000009xg0000000047gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:07 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:06 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:07 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:07 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: eb22034c-601e-0070-2f28-26a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222607Z-r197bdfb6b48pcqqxhenwd2uz800000001v000000000e550 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:06 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:07 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:07 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222607Z-16849878b7867ttgfbpnfxt44s00000001400000000007ka x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:07 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:07 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:07 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:07 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222607Z-16849878b78nx5sne3fztmu6xc0000000270000000001wxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:07 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:07 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-16849878b785dznd7xpawq9gcn00000002f000000000rdcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:07 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8c1a2bd7-001e-008d-4028-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-r197bdfb6b4c8q4qvwwy2byzsw00000001c000000000704s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:07 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:07 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222607Z-16849878b78nx5sne3fztmu6xc000000024g00000000amk3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:07 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-15b8d89586f4zwgbgswvrvz4vs000000028000000000gya0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:08 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-15b8d89586f4zwgbgswvrvz4vs000000029000000000e0hu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:08 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 78a5f633-501e-005b-51a6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-16849878b786lft2mu9uftf3y4000000028g0000000121d5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:08 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-15b8d89586fxdh48qknu9dqk2g0000000560000000002k0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:08 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-16849878b78k8q5pxkgux3mbgg00000009tg00000000c134 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:08 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:08 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:08 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222608Z-16849878b78hz7zj8u0h2zng140000000a0g000000001f2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:08 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:09 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:09 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:09 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222609Z-16849878b78z5q7jpbgf6e9mcw00000009v000000000t9gf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:09 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:09 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:09 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:09 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53cea195-601e-0084-75f3-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222609Z-r197bdfb6b4cz6xrsdncwtgzd40000000su00000000026ht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:09 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:09 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:09 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:09 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222609Z-16849878b785g992cz2s9gk35c00000009v000000000ekrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:09 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:09 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:09 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:09 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222609Z-16849878b785dznd7xpawq9gcn00000002m00000000069v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:09 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:09 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:09 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:09 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 92c6748a-601e-0001-5ca3-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222609Z-16849878b78j5kdg3dndgqw0vg00000002rg00000000yxp9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:09 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:10 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:10 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:10 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 12d17a45-e01e-0051-1e28-2684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222610Z-17c5cb586f6zrq5bnguxgu7frc0000000200000000000dxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:10 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:10 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:10 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:10 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222610Z-16849878b785dznd7xpawq9gcn00000002kg000000008m0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:10 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:10 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:10 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222610Z-16849878b78km6fmmkbenhx76n00000000g0000000001b31 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:10 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:10 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:10 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:10 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: c362eb52-101e-0017-38f3-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222610Z-15b8d89586ffsjj9qb0gmb1stn000000056g00000000gxww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:10 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:10 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:10 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:10 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222610Z-16849878b78fssff8btnns3b1400000001e000000000d6cp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:10 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:11 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:11 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:11 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222611Z-16849878b78rjhv97f3nhawr7s00000009pg00000000wzhx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:11 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:11 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222611Z-16849878b78nx5sne3fztmu6xc0000000270000000001x5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:11 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:11 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222611Z-16849878b78hz7zj8u0h2zng1400000009z00000000079wy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:11 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:11 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:11 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 2045ee81-701e-003e-375a-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222611Z-17c5cb586f6dsb4r19gvkc9r7s000000038000000000k08d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:11 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:11 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:11 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:11 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 12b50f8a-301e-0033-52f0-25fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222611Z-16849878b78c5zx4gw8tcga1b400000009sg0000000077z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:11 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:12 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:12 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bb32e714-c01e-008d-58b0-262eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222612Z-16849878b78j5kdg3dndgqw0vg00000002sg00000000ugwr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:12 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:12 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222612Z-16849878b78hh85qc40uyr8sc800000001fg000000006rpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:12 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:12 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 9f655729-901e-0015-5aae-24b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222612Z-15b8d89586fx2hlt035xdehq580000000gy00000000083yf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:12 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:12 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:12 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222612Z-16849878b78x6gn56mgecg60qc000000030g0000000065x4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 22:26:12 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 22:26:12 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 22:26:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 22:26:12 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T222612Z-16849878b78x6gn56mgecg60qc00000002vg00000000w3qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 22:26:12 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3740, Parent PID: 3552

General

Target ID:	0
Start time:	18:24:46
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3612, Parent PID: 3740

General

Target ID:	2
Start time:	18:24:49
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2024,i,15824035957569590853,321438738758834406,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6368, Parent PID: 3552

General

Target ID:	3
Start time:	18:24:51
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.ynvgroup.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.ynvgroup.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3740, Parent PID: 3552

General

Chronological Activities

Analysis Process: chrome.exePID: 3612, Parent PID: 3740

General

Chronological Activities

Analysis Process: chrome.exePID: 6368, Parent PID: 3552

General

Chronological Activities

Disassembly

Windows Analysis Report
http://www.ynvgroup.com