Edit tour

Windows Analysis Report
https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$

Overview

General Information

Sample URL:	https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$
Analysis ID:	1544655
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1936,i,453894502974441255,17825873918836266513,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 15:06:13 GMTContent-Type: text/htmlContent-Length: 1245Connection: closep3p: CP="CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"CF-Cache-Status: HITAge: 257Expires: Tue, 29 Oct 2024 19:06:13 GMTCache-Control: public, max-age=14400Server: cloudflareCF-RAY: 8da411786cb4e5b9-DFW

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 55195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55197
Source: unknown	Network traffic detected: HTTP traffic on port 55269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55192
Source: unknown	Network traffic detected: HTTP traffic on port 55217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55267
Source: unknown	Network traffic detected: HTTP traffic on port 55285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55268
Source: unknown	Network traffic detected: HTTP traffic on port 55262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55271
Source: unknown	Network traffic detected: HTTP traffic on port 55201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55273
Source: unknown	Network traffic detected: HTTP traffic on port 55310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55278
Source: unknown	Network traffic detected: HTTP traffic on port 55267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55279
Source: unknown	Network traffic detected: HTTP traffic on port 55280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55285
Source: unknown	Network traffic detected: HTTP traffic on port 55185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55280
Source: unknown	Network traffic detected: HTTP traffic on port 55273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55289
Source: unknown	Network traffic detected: HTTP traffic on port 55245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55295
Source: unknown	Network traffic detected: HTTP traffic on port 55305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55290
Source: unknown	Network traffic detected: HTTP traffic on port 55180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55291
Source: unknown	Network traffic detected: HTTP traffic on port 55274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55187
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55189
Source: unknown	Network traffic detected: HTTP traffic on port 55223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55185
Source: unknown	Network traffic detected: HTTP traffic on port 55311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 55208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55229
Source: unknown	Network traffic detected: HTTP traffic on port 55289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55223
Source: unknown	Network traffic detected: HTTP traffic on port 55266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55224
Source: unknown	Network traffic detected: HTTP traffic on port 55243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55226
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55230
Source: unknown	Network traffic detected: HTTP traffic on port 55186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55233
Source: unknown	Network traffic detected: HTTP traffic on port 55295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55238
Source: unknown	Network traffic detected: HTTP traffic on port 55192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55235
Source: unknown	Network traffic detected: HTTP traffic on port 55284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55236
Source: unknown	Network traffic detected: HTTP traffic on port 55249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55240
Source: unknown	Network traffic detected: HTTP traffic on port 55306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55249
Source: unknown	Network traffic detected: HTTP traffic on port 55202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55252
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55255
Source: unknown	Network traffic detected: HTTP traffic on port 55301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55251
Source: unknown	Network traffic detected: HTTP traffic on port 55278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55256
Source: unknown	Network traffic detected: HTTP traffic on port 55261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55263
Source: unknown	Network traffic detected: HTTP traffic on port 55244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55261
Source: unknown	Network traffic detected: HTTP traffic on port 55187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55262
Source: unknown	Network traffic detected: HTTP traffic on port 55250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55304
Source: unknown	Network traffic detected: HTTP traffic on port 55227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55305
Source: unknown	Network traffic detected: HTTP traffic on port 55204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55310
Source: unknown	Network traffic detected: HTTP traffic on port 55307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55311
Source: unknown	Network traffic detected: HTTP traffic on port 55221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55200
Source: unknown	Network traffic detected: HTTP traffic on port 55302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55208
Source: unknown	Network traffic detected: HTTP traffic on port 55287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55201
Source: unknown	Network traffic detected: HTTP traffic on port 55248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55202
Source: unknown	Network traffic detected: HTTP traffic on port 55260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55204
Source: unknown	Network traffic detected: HTTP traffic on port 55293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55211
Source: unknown	Network traffic detected: HTTP traffic on port 55188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55217
Source: unknown	Network traffic detected: HTTP traffic on port 55226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55214
Source: unknown	Network traffic detected: HTTP traffic on port 55265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55220
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55222
Source: unknown	Network traffic detected: HTTP traffic on port 55183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55271 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:55180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:55183 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/2@4/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1936,i,453894502974441255,17825873918836266513,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1936,i,453894502974441255,17825873918836266513,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
portal.csr24.com	217.163.76.10	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$	false		unknown
https://portal.csr24.com/favicon.ico	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
217.163.76.10	portal.csr24.com	United Kingdom	3356	LEVEL3US	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.13
192.168.2.23
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544655
Start date and time:	2024-10-29 16:05:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/2@4/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.142, 173.194.76.84, 142.250.186.163, 142.250.185.174, 34.104.35.123, 20.12.23.50, 88.221.110.91, 2.16.100.168, 192.229.221.95, 20.3.187.198, 40.69.42.241, 13.95.31.18, 131.107.255.255, 142.250.186.99
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Reputation:	low
URL:	https://portal.csr24.com/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 16:06:11.926944971 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:11.926995039 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:11.927076101 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:11.927154064 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:11.927191973 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:11.927237988 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:11.927405119 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:11.927424908 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:11.927555084 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:11.927568913 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.551870108 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.552143097 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.552160025 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.553570986 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.553648949 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.555919886 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.555993080 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.556265116 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.556272030 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.556627035 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.556792021 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.556807995 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.558604002 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.558670998 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.559453964 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.559541941 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.602791071 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.602796078 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.602808952 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.656419992 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.817810059 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.817883015 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.817925930 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.817997932 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.818006039 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:12.818048000 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.845777035 CET	49740	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:12.845801115 CET	443	49740	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:13.125266075 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:13.167336941 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:13.297202110 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:13.297310114 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:13.297355890 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:13.300614119 CET	49739	443	192.168.2.4	217.163.76.10
Oct 29, 2024 16:06:13.300632954 CET	443	49739	217.163.76.10	192.168.2.4
Oct 29, 2024 16:06:14.277596951 CET	49744	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:06:14.277620077 CET	443	49744	142.250.185.132	192.168.2.4
Oct 29, 2024 16:06:14.277930021 CET	49744	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:06:14.279347897 CET	49744	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:06:14.279364109 CET	443	49744	142.250.185.132	192.168.2.4
Oct 29, 2024 16:06:14.293216944 CET	443	49744	142.250.185.132	192.168.2.4
Oct 29, 2024 16:06:14.298753023 CET	49745	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:06:14.298782110 CET	443	49745	142.250.185.132	192.168.2.4
Oct 29, 2024 16:06:14.298908949 CET	49745	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:06:14.319670916 CET	49745	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:06:14.319693089 CET	443	49745	142.250.185.132	192.168.2.4
Oct 29, 2024 16:06:14.331892014 CET	443	49745	142.250.185.132	192.168.2.4
Oct 29, 2024 16:06:15.670689106 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:15.670727015 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:15.670802116 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:15.684854031 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:15.684879065 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.555478096 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.555644035 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.560750008 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.560760021 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.561156034 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.614337921 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.660151005 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.707324982 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.906260967 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.906368971 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.906646967 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.906689882 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.906708002 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.906708002 CET	49746	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.906716108 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.906752110 CET	443	49746	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.989619970 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.989686012 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:16.993767023 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.997631073 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:16.997648001 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:17.850902081 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:17.850982904 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:17.852658033 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:17.852668047 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:17.853014946 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:17.854264975 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:17.899331093 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:18.099327087 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:18.099446058 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:18.099503994 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:18.100286007 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:18.100316048 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:18.100330114 CET	49747	443	192.168.2.4	184.28.90.27
Oct 29, 2024 16:06:18.100337029 CET	443	49747	184.28.90.27	192.168.2.4
Oct 29, 2024 16:06:26.118971109 CET	49819	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:26.124694109 CET	53	49819	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:26.124768972 CET	49819	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:26.124809980 CET	49819	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:26.130234003 CET	53	49819	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:26.680960894 CET	49723	80	192.168.2.4	2.19.126.137
Oct 29, 2024 16:06:26.687367916 CET	80	49723	2.19.126.137	192.168.2.4
Oct 29, 2024 16:06:26.687437057 CET	49723	80	192.168.2.4	2.19.126.137
Oct 29, 2024 16:06:26.731322050 CET	53	49819	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:26.735296965 CET	49819	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:26.743047953 CET	53	49819	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:26.743108988 CET	49819	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:28.749624014 CET	55178	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:28.755672932 CET	53	55178	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:28.755974054 CET	55178	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:28.756267071 CET	55178	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:28.761889935 CET	53	55178	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:28.762000084 CET	53	55178	1.1.1.1	192.168.2.4
Oct 29, 2024 16:07:04.183948994 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:04.183991909 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:04.184798002 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:04.184798002 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:04.184828043 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:04.950143099 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:04.950232029 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:04.952596903 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:04.952609062 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:04.953088045 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:04.964574099 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.011377096 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.216237068 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.216275930 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.216295004 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.216345072 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.216368914 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.216403008 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.216424942 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.333307028 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.333347082 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.333424091 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.333496094 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.333534956 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.333563089 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.450380087 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.450422049 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.450483084 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.450526953 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.450551987 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.450653076 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.567668915 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.567709923 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.567778111 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.567827940 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.567845106 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.567919970 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.684617043 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.684664011 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.684708118 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.684731960 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.684772968 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.684797049 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.802232981 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.802284956 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.802324057 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.802352905 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.802388906 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.802406073 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.918807030 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.918843985 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.918922901 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.918996096 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:05.919037104 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:05.919152021 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.035900116 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.035980940 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.035994053 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.036029100 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.036076069 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.036117077 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.153270006 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.153337955 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.153388023 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.153419018 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.153464079 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.153464079 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.199255943 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.199343920 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.199348927 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.199369907 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.199419975 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.199441910 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.311228991 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.311306000 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.311372042 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.311444998 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.311480045 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.311503887 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.388194084 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.388278008 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.388293028 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.388319969 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.388351917 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.388370991 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.504730940 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.504786015 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.504822016 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.504859924 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.504889965 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.504956961 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.505053997 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.505125046 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.505139112 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.505224943 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.505239010 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.505249023 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.505291939 CET	55180	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.505301952 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.505331993 CET	443	55180	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.553428888 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.553495884 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.553613901 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.554799080 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.554814100 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.555963993 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.556020021 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.556076050 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.556451082 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.556466103 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.557075024 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.557085037 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.557235003 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.557962894 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.558005095 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.558080912 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.558252096 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.558260918 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.559231043 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.559263945 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.559349060 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.559519053 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.559529066 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:06.559802055 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:06.559823036 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.301918030 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.302491903 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.302534103 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.303150892 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.303158045 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.305356979 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.305740118 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.305762053 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.306301117 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.306308031 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.320955992 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.321369886 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.321409941 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.321866989 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.321875095 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.323728085 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.324098110 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.324125051 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.324558973 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.324564934 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.349149942 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.349520922 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.349554062 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.350058079 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.350063086 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.436630011 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.436657906 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.436737061 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.436743021 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.436814070 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.437068939 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.437120914 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.437150002 CET	55182	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.437165976 CET	443	55182	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.440298080 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.440361977 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.440603018 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.440603018 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.440642118 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.441143990 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.441174030 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.441231012 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.441257000 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.441303015 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.441418886 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.441447973 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.441453934 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.441481113 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.441483974 CET	55181	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.441499949 CET	443	55181	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.443641901 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.443694115 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.443792105 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.443911076 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.443921089 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.488780022 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.488848925 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.488914013 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.489175081 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.489202023 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.489226103 CET	55183	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.489233971 CET	443	55183	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.489983082 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.490005016 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.490055084 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.490077972 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.490119934 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.494976997 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.495004892 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.495019913 CET	55184	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.495028973 CET	443	55184	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.497158051 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.497189045 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.497256994 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.497400999 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.497419119 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.497517109 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.497596025 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.497663021 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.497744083 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.497766972 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.505585909 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.505644083 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.505702972 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.505856037 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.505875111 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.505887985 CET	55185	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.505892992 CET	443	55185	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.508194923 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.508208036 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:07.508321047 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.508436918 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:07.508451939 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.199222088 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.202189922 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.202236891 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.204706907 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.204715014 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.252965927 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.253463030 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.254020929 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.254021883 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.254057884 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.254077911 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.254398108 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.254422903 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.255053043 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.255059004 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.272989035 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.273315907 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.273338079 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.273710966 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.273716927 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.274053097 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.274375916 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.274441004 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.274944067 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.274956942 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.340456963 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.340540886 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.340854883 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.340854883 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.340914965 CET	55186	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.340938091 CET	443	55186	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.343991995 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.344038010 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.344207048 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.344460964 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.344480038 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394411087 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394468069 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394531965 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394593000 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.394622087 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394756079 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.394779921 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394781113 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.394795895 CET	55188	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.394804001 CET	443	55188	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394925117 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.394936085 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.394968987 CET	55187	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.394973993 CET	443	55187	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.397736073 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.397736073 CET	55192	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.397767067 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.397780895 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.397872925 CET	55192	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.397878885 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.398029089 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.398044109 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.398068905 CET	55192	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.398082972 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.412334919 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.412473917 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.412576914 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.412576914 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.412628889 CET	55190	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.412643909 CET	443	55190	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.413501978 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.413562059 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.414731979 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.414761066 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.414807081 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.414807081 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.414907932 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.414951086 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.414954901 CET	55189	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.414956093 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.414979935 CET	443	55189	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.416910887 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.416924953 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:08.417337894 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.417337894 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:08.417357922 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.149981976 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.150604963 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.150655031 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.151086092 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.151093006 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.159178019 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.159462929 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.159567118 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.159584045 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.159722090 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.159761906 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.160104036 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.160111904 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.160204887 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.160217047 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.203650951 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.204247952 CET	55192	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.204266071 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.204797029 CET	55192	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.204802036 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.206804037 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.207397938 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.207417011 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.211483955 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.211488962 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.295089006 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.295197010 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.295249939 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.295412064 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.295435905 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.295449018 CET	55194	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.295456886 CET	443	55194	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.299463034 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.299515009 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.299560070 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.302222967 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.302257061 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.302257061 CET	55193	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.302263021 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.302272081 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.302279949 CET	443	55193	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.302339077 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.302515030 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.302529097 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.304255009 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.304295063 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.304523945 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.304650068 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.304661989 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.313632011 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.313708067 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.313761950 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.313853025 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.313873053 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.313885927 CET	55191	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.313893080 CET	443	55191	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.315579891 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.315598011 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.315664053 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.315749884 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.315754890 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.348726034 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.348982096 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.349056959 CET	55192	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.349086046 CET	55192	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.349097013 CET	443	55192	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.351237059 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.351280928 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.351427078 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.351470947 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.351550102 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.351566076 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.351579905 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.351608038 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.351691008 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.351706028 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.351718903 CET	55195	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.351723909 CET	443	55195	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.353502989 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.353529930 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:09.353589058 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.353683949 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:09.353692055 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.054460049 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.055541039 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.055541039 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.055581093 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.055591106 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.068197012 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.068550110 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.068578959 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.068881989 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.068886995 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.069662094 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.069951057 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.069966078 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.070261002 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.070264101 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.125425100 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.125936985 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.125983953 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.126418114 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.126427889 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.131643057 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.132342100 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.132342100 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.132376909 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.132386923 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.191694975 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.191747904 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.191994905 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.192028046 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.192028999 CET	55196	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.192049026 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.192056894 CET	443	55196	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.194803953 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.194854975 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.195122957 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.195122957 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.195157051 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.206681013 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.207062960 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.207375050 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.207375050 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.207598925 CET	55197	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.207608938 CET	443	55197	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.208358049 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.208425045 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.208605051 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.208605051 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.208621025 CET	55199	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.208625078 CET	443	55199	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.209887028 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.209917068 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.210786104 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.210819960 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.210849047 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.210952044 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.211049080 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.211050034 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.211057901 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.211067915 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.262701035 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.262799025 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.263098001 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.263098001 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.263138056 CET	55200	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.263154984 CET	443	55200	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.265919924 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.265959024 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.266100883 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.266266108 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.266282082 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.271110058 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.271276951 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.273279905 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.273281097 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.273627043 CET	55201	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.273643017 CET	443	55201	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.275650024 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.275661945 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.275893927 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.275893927 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.275911093 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.954935074 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.955497980 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.955533981 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.955991030 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.956001997 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.959361076 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.959758043 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.959775925 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.960088015 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.960093975 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.972795963 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.973160028 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.973179102 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:10.973522902 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:10.973530054 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.026612997 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.027343035 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.027352095 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.027837038 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.027842045 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.035182953 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.035526037 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.035563946 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.035895109 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.035907030 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.094132900 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.094449997 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.094511986 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.094553947 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.094574928 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.094590902 CET	55202	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.094598055 CET	443	55202	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.095905066 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.096136093 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.096182108 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.096276045 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.096291065 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.096299887 CET	55204	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.096306086 CET	443	55204	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.098050117 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.098088026 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.098165035 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.098362923 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.098375082 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.098675013 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.098701000 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.098778009 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.098886013 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.098898888 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.113190889 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.113348007 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.113406897 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.113488913 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.113501072 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.113511086 CET	55203	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.113518000 CET	443	55203	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.115828037 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.115865946 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.116044044 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.116262913 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.116276979 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.166008949 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.166137934 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.166348934 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.166403055 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.166409016 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.166416883 CET	55206	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.166424990 CET	443	55206	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.169537067 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.169548988 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.169605970 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.169828892 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.169841051 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.175302982 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.175621986 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.175707102 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.175760031 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.175760984 CET	55205	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.175805092 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.175827980 CET	443	55205	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.177799940 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.177829981 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.177886009 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.178045034 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.178054094 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.887182951 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.888192892 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.888227940 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.889574051 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.889667034 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.889676094 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.890520096 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.890541077 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.892694950 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.892755032 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.892759085 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.893426895 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.893517017 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.894529104 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.894548893 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.927789927 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.929150105 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.929168940 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.929429054 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.929446936 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.961460114 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.967519045 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.967544079 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:11.968378067 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:11.968389988 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.026272058 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.026458025 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.026667118 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.026911974 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.026968002 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.026968002 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.026968956 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.027051926 CET	55209	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.027072906 CET	443	55209	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.028805971 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.028805971 CET	55208	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.028829098 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.028844118 CET	443	55208	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.033756971 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.033818007 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.034028053 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.034061909 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.034104109 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.034406900 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.034406900 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.034432888 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.034838915 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.034866095 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.035867929 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.036098003 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.037451029 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.037451029 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.037518024 CET	55207	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.037538052 CET	443	55207	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.040152073 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.040205002 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.040437937 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.043766975 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.043796062 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.064862967 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.064945936 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.068056107 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.068056107 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.068227053 CET	55211	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.068245888 CET	443	55211	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.071125984 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.071214914 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.071542978 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.071542978 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.071620941 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.107861996 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.107922077 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.108081102 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.108243942 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.108243942 CET	55210	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.108268023 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.108283997 CET	443	55210	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.110929966 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.110971928 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.111892939 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.112138987 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.112153053 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.781399965 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.781960011 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.782011986 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.782834053 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.782846928 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.791737080 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.792314053 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.792337894 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.792840958 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.792845964 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.803677082 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.804157972 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.804171085 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.804689884 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.804693937 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.812316895 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.812725067 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.812745094 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.813323975 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.813339949 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.885795116 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.886312008 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.886331081 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.887038946 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.887047052 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.917284012 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.917373896 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.917439938 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.917638063 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.917639017 CET	55213	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.917678118 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.917705059 CET	443	55213	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.920909882 CET	55217	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.920977116 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.921042919 CET	55217	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.921240091 CET	55217	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.921256065 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.928792953 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.928858042 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.928905964 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.929032087 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.929052114 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.929070950 CET	55212	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.929075956 CET	443	55212	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.931648970 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.931685925 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.931762934 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.931900978 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.931912899 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.940876007 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.941108942 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.941171885 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.941215038 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.941220045 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.941230059 CET	55214	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.941234112 CET	443	55214	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.943514109 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.943530083 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.943592072 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.943744898 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.943757057 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.949491978 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.949570894 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.949630022 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.949739933 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.949760914 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.949789047 CET	55215	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.949801922 CET	443	55215	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.952088118 CET	55220	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.952130079 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:12.952212095 CET	55220	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.952337027 CET	55220	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:12.952368021 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.028640985 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.028729916 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.028784990 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.029073954 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.029098034 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.029114008 CET	55216	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.029120922 CET	443	55216	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.032397985 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.032433987 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.032499075 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.032866955 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.032881975 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.670167923 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.670825958 CET	55217	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.670854092 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.671863079 CET	55217	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.671868086 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.690344095 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.694765091 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.698688984 CET	55220	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.698702097 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.700129032 CET	55220	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.700138092 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.701004982 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.701020956 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.702244997 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.702250957 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.785586119 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.786206961 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.786237001 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.787206888 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.787213087 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.808504105 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.808713913 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.809206009 CET	55217	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.809367895 CET	55217	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.809385061 CET	443	55217	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.815325022 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.815357924 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.815418959 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.815776110 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.815792084 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.834893942 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.835064888 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.835124016 CET	55220	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.835262060 CET	55220	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.835283041 CET	443	55220	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.839119911 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.839198112 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.839569092 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.840096951 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.840138912 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.840203047 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.840749979 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.840764999 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.840958118 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.840979099 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.840995073 CET	55218	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.841002941 CET	443	55218	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.846184969 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.846234083 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.846385956 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.846548080 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.846565962 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.923794985 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.924031019 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.924122095 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.924511909 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.924525023 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.924536943 CET	55221	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.924541950 CET	443	55221	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.929215908 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.929260969 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:13.929318905 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.929821014 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:13.929836035 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.058567047 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.059290886 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.059324026 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.060445070 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.060450077 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.198925018 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.199142933 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.199203968 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.199402094 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.199420929 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.199425936 CET	55219	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.199433088 CET	443	55219	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.203767061 CET	55226	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.203828096 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.204003096 CET	55226	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.204286098 CET	55226	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.204299927 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.217314959 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:14.217350960 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:14.217540026 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:14.218038082 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:14.218053102 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:14.569195986 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.569734097 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.569767952 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.570308924 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.570327997 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.621587038 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.621987104 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.622020960 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.622544050 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.622555971 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.625555992 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.625988960 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.626019001 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.626529932 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.626543999 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.706662893 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.707645893 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.707725048 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.707794905 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.707794905 CET	55222	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.707815886 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.707819939 CET	443	55222	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.715224028 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.715277910 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.715437889 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.715591908 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.715609074 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.720833063 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.721391916 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.721429110 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.721862078 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.721868038 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.761480093 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.761632919 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.761733055 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.761780977 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.761801958 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.761815071 CET	55224	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.761821985 CET	443	55224	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.764801979 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.764872074 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.764939070 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.765052080 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.765075922 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.782254934 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.782313108 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.782402039 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.782524109 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.782537937 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.782551050 CET	55223	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.782557011 CET	443	55223	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.785372972 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.785398960 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.785476923 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.785628080 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.785641909 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.863874912 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.863929033 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.864021063 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.864236116 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.864253044 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.864476919 CET	55225	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.864484072 CET	443	55225	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.867238045 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.867288113 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.867449045 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.868017912 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.868041992 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.975382090 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:14.990339994 CET	55226	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:14.990371943 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.021357059 CET	55226	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.021373034 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.111752033 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:15.112639904 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:15.112668991 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:15.113675117 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:15.113755941 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:15.115766048 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:15.115833044 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:15.157624006 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:15.157641888 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:15.162319899 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.162411928 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.162504911 CET	55226	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.179600954 CET	55226	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.179639101 CET	443	55226	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.191386938 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.191438913 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.191554070 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.192841053 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.192862034 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.204514027 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:15.318444014 CET	49724	80	192.168.2.4	2.19.126.137
Oct 29, 2024 16:07:15.325721979 CET	80	49724	2.19.126.137	192.168.2.4
Oct 29, 2024 16:07:15.325838089 CET	49724	80	192.168.2.4	2.19.126.137
Oct 29, 2024 16:07:15.465445042 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.466362000 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.466396093 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.467235088 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.467242002 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.522178888 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.522802114 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.522842884 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.523716927 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.523732901 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.541527987 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.542181015 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.542207003 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.543144941 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.543152094 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.622459888 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.622570992 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.622868061 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.623080015 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.623080015 CET	55228	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.623097897 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.623117924 CET	443	55228	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.628868103 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.628897905 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.629086018 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.629234076 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.629250050 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.644144058 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.644630909 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.644661903 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.645770073 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.645783901 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.667496920 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.667563915 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.668040037 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.668165922 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.668189049 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.668206930 CET	55229	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.668215036 CET	443	55229	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.671343088 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.671376944 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.671631098 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.671773911 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.671791077 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.679713011 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.679771900 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.679867029 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.680090904 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.680090904 CET	55230	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.680105925 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.680109978 CET	443	55230	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.682713032 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.682734013 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.682898045 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.683322906 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.683336020 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.784648895 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.784724951 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.784796000 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.786039114 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.786068916 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.786086082 CET	55231	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.786094904 CET	443	55231	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.790980101 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.791022062 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.791408062 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.791888952 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.791902065 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.937222004 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.938637018 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.938673019 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:15.940162897 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:15.940177917 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.072892904 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.073584080 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.073641062 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.076742887 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.076742887 CET	55232	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.076742887 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.076764107 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.076781988 CET	443	55232	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.076798916 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.076874971 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.077064037 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.077078104 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.400942087 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.401506901 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.401536942 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.401984930 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.401992083 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.435091972 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.435622931 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.435646057 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.436115980 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.436122894 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.436728001 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.437331915 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.437357903 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.437504053 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.437508106 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.542385101 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.542592049 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.542663097 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.544223070 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.544241905 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.544291019 CET	55233	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.544301987 CET	443	55233	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.548880100 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.550102949 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.550132990 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.551337004 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.551343918 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.554183006 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.554210901 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.554289103 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.554410934 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.554423094 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.573122025 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.573256016 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.573344946 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.573412895 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.573412895 CET	55235	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.573425055 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.573435068 CET	443	55235	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.577327967 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.577404022 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.577517033 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.577946901 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.577996969 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.578064919 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.578186989 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.578202009 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.578212976 CET	55234	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.578218937 CET	443	55234	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.579148054 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.579164028 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.580845118 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.580869913 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.581018925 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.581242085 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.581250906 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.689564943 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.689686060 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.689882040 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.689924002 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.689924002 CET	55236	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.689949036 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.689960003 CET	443	55236	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.692981005 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.693025112 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.693109035 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.693242073 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.693252087 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.843581915 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.844202995 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.844237089 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.844630003 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.844638109 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.981353045 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.981626987 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.981715918 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.981776953 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.981776953 CET	55237	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.981816053 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.981842995 CET	443	55237	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.984900951 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.984945059 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:16.985008001 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.985167980 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:16.985178947 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.313812017 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.314471960 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.314507008 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.314971924 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.314982891 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.333398104 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.333841085 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.333856106 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.334410906 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.334414959 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.343276978 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.343595028 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.343635082 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.343978882 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.343986034 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.435498953 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.435985088 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.436014891 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.436444998 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.436450005 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.451661110 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.451741934 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.451883078 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.452094078 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.452116013 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.452126980 CET	55238	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.452132940 CET	443	55238	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.455107927 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.455146074 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.455334902 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.455590010 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.455600023 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.495008945 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.495083094 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.495146036 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.495343924 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.495357037 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.495366096 CET	55240	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.495372057 CET	443	55240	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.497967005 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.498024940 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.498297930 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.498408079 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.498429060 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.498436928 CET	55239	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.498444080 CET	443	55239	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.498593092 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.498636007 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.498714924 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.498868942 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.498883009 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.500641108 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.500679016 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.500925064 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.501087904 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.501101971 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.573915005 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.573995113 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.574079037 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.574280024 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.574280024 CET	55241	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.574299097 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.574309111 CET	443	55241	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.577464104 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.577513933 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.577692032 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.577872038 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.577886105 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.760399103 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.760945082 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.760977030 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.761430025 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.761434078 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.901168108 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.901259899 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.901506901 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.901546001 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.901566982 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.901577950 CET	55242	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.901582956 CET	443	55242	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.904778957 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.904813051 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:17.904932976 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.905056953 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:17.905075073 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.247093916 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.247675896 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.247715950 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.248184919 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.248189926 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.250822067 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.251163006 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.251177073 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.251692057 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.251698971 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.257591963 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.257921934 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.257941008 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.258665085 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.258670092 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.365833998 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.366499901 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.366518974 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.367026091 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.367031097 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.384800911 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.384884119 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.384937048 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.385077000 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.385096073 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.385107040 CET	55243	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.385111094 CET	443	55243	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.387761116 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.387783051 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.387846947 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.387968063 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.387976885 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.388792038 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.388880968 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.389025927 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.389025927 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.389050007 CET	55245	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.389065981 CET	443	55245	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.391128063 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.391158104 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.391258955 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.391458035 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.391469002 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.398982048 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.399034977 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.399106979 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.399202108 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.399215937 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.399225950 CET	55244	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.399230957 CET	443	55244	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.400995016 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.401006937 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.401190042 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.401345015 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.401355982 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.512438059 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.512645006 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.512731075 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.512765884 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.512765884 CET	55246	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.512778044 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.512787104 CET	443	55246	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.515882015 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.515917063 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.516083002 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.516273975 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.516290903 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.654762030 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.655332088 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.655349016 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.655843019 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.655848026 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.791934013 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.791997910 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.792076111 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.792278051 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.792278051 CET	55247	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.792293072 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.792300940 CET	443	55247	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.795320988 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.795342922 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:18.795536995 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.795684099 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:18.795696974 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.146065950 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.146636009 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.146667957 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.147088051 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.147093058 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.150192022 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.150527000 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.150533915 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.150930882 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.150935888 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.158868074 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.159152985 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.159166098 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.159581900 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.159588099 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.275064945 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.275686026 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.275710106 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.276138067 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.276144028 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.284403086 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.284451962 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.284504890 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.284745932 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.284745932 CET	55248	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.284760952 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.284770012 CET	443	55248	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.287674904 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.287723064 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.287790060 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.287911892 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.287931919 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.288491011 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.288551092 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.288589001 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.288721085 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.288724899 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.288758993 CET	55250	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.288764954 CET	443	55250	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.290580988 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.290608883 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.290836096 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.290946960 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.290957928 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.298269987 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.298317909 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.298360109 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.298511982 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.298525095 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.298558950 CET	55249	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.298564911 CET	443	55249	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.300437927 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.300451994 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.300708055 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.300801039 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.300812960 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.414644003 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.414906979 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.414975882 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.415057898 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.415077925 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.415088892 CET	55251	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.415093899 CET	443	55251	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.419277906 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.419323921 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.419754028 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.419909000 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.419924974 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.559329033 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.559956074 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.559974909 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.560333014 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.560344934 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.697876930 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.697938919 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.698535919 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.698535919 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.698690891 CET	55252	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.698709011 CET	443	55252	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.701210022 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.701253891 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:19.701356888 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.701523066 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:19.701536894 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.047075033 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.047755003 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.047779083 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.048537016 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.048543930 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.049748898 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.054693937 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.054693937 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.054709911 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.054727077 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.063934088 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.064476967 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.064496040 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.065747023 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.065752983 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.173664093 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.176892996 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.176922083 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.177704096 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.177709103 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.188079119 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.188302994 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.188332081 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.188363075 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.188404083 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.188452005 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.188649893 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.188672066 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.188729048 CET	55254	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.188734055 CET	443	55254	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.205519915 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.205573082 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.205730915 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.213433027 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.213464975 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.213537931 CET	55255	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.213546038 CET	443	55255	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.215332985 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.215339899 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.215416908 CET	55253	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.215421915 CET	443	55253	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.220541954 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.220607042 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.220727921 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.221122980 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.221167088 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.221311092 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.222429037 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.222445011 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.222445965 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.222556114 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.222827911 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.222842932 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.222887993 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.223140955 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.223176003 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.311490059 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.311546087 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.311644077 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.312213898 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.312235117 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.312271118 CET	55256	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.312275887 CET	443	55256	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.315922022 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.315985918 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.316165924 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.316350937 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.316365004 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.502377033 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.503174067 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.503200054 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.505698919 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.505708933 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.648740053 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.648816109 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.648870945 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.649049044 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.649075031 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.649086952 CET	55257	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.649092913 CET	443	55257	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.651854038 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.651907921 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.651983023 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.652112007 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:20.652131081 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:20.999852896 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.000447035 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.000510931 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.000873089 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.000889063 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.007174015 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.007561922 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.007596970 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.008112907 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.008119106 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.008574963 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.008928061 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.008951902 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.009429932 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.009435892 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.059186935 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.059598923 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.059626102 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.060570955 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.060576916 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.135998964 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.136019945 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.136091948 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.136132956 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.136876106 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.136951923 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.144618034 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.144655943 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.144681931 CET	55260	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.144697905 CET	443	55260	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.146274090 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.146342993 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.146404982 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.150437117 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.150444984 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.150458097 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.150507927 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.150525093 CET	55258	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.150532961 CET	443	55258	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.150562048 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.150964975 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.150986910 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.150996923 CET	55259	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.151002884 CET	443	55259	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.155304909 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.155354023 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.155437946 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.155733109 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.155747890 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.178559065 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.178594112 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.178606987 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.178644896 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.178658009 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.178685904 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.189577103 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.189587116 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.189748049 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.189765930 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.195488930 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.195512056 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.195575953 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.195596933 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.195749998 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.195771933 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.195790052 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.195801020 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.195801020 CET	55261	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.195808887 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.195816040 CET	443	55261	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.198591948 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.198616028 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.198698044 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.198904037 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.198915958 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.405606985 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.406817913 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.406883001 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.408557892 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.408572912 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.542100906 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.542126894 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.542226076 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.542229891 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.542304039 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.542628050 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.542664051 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.542695999 CET	55262	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.542711973 CET	443	55262	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.548212051 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.548264980 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.548424006 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.551831961 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.551846027 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.908215046 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.909787893 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.909787893 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.909821987 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.909840107 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.946728945 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.947885036 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.947906971 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.948987961 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.948996067 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.958421946 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.960778952 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.960778952 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.960797071 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.960804939 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.970570087 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.971575022 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.971575022 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:21.971582890 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:21.971595049 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.046746969 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.046782017 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.046852112 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.047027111 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.047126055 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.047126055 CET	55263	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.047177076 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.047204971 CET	443	55263	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.049710035 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.049738884 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.049998045 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.049998045 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.050023079 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.086036921 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.086230993 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.086329937 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.086329937 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.086406946 CET	55265	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.086420059 CET	443	55265	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.088599920 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.088637114 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.088764906 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.088891983 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.088906050 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.097418070 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.097541094 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.097703934 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.097733974 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.097733974 CET	55264	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.097747087 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.097754955 CET	443	55264	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.099730968 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.099750996 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.099911928 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.100083113 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.100090027 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.112282038 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.112335920 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.112536907 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.112536907 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.112610102 CET	55266	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.112618923 CET	443	55266	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.114518881 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.114532948 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.114615917 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.114746094 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.114758015 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.294378996 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.295444012 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.295444012 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.295466900 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.295486927 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.430222988 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.430285931 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.430608988 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.430608988 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.430675983 CET	55267	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.430691004 CET	443	55267	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.433419943 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.433464050 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.433707952 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.433707952 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.433751106 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.811501026 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.817250013 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.817270041 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.819076061 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.819081068 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.850624084 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.854840040 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.854860067 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.856353998 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.856360912 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.881455898 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.882432938 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.882442951 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.883469105 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.883474112 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.887748957 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.889117002 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.889139891 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.890471935 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.890480042 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.953155041 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.953232050 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.953282118 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.953808069 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.953824997 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.953835964 CET	55268	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.953841925 CET	443	55268	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.990885019 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.990943909 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.991003036 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.991048098 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.991117954 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.991168976 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.991996050 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.992019892 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.992543936 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.992561102 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.992573023 CET	55269	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.992579937 CET	443	55269	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.998164892 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.998214006 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:22.998312950 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.998517036 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:22.998533964 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.020394087 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.020452023 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.020500898 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.020900965 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.020912886 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.020924091 CET	55270	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.020929098 CET	443	55270	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.027523041 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.027554035 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.027616978 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.027820110 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.027863026 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.027904034 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.028062105 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.028078079 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.028599977 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.028611898 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.028625965 CET	55271	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.028631926 CET	443	55271	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.034308910 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.034357071 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.034410000 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.034707069 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.034723997 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.199212074 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.199912071 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.199928999 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.200772047 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.200776100 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.340429068 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.340488911 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.340540886 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.341363907 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.341383934 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.341398954 CET	55272	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.341406107 CET	443	55272	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.348529100 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.348575115 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.348644972 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.349499941 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.349514961 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.764720917 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.765279055 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.765312910 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.765809059 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.765815020 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.770998001 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.771764040 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.771764040 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.771794081 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.771809101 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.791707993 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.792412043 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.792412043 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.792438984 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.792459965 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.802928925 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.803617001 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.803617954 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.803633928 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.803652048 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.904495001 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.904516935 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.904616117 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.904685974 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.904930115 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.904930115 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.905404091 CET	55274	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.905424118 CET	443	55274	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.908237934 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.908289909 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.908478975 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.908586025 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.908595085 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.932653904 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.932679892 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.932729006 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.932734013 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.932944059 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.932944059 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.932965994 CET	55276	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.932976961 CET	443	55276	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.935343981 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.935386896 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.935687065 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.935687065 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.935717106 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.947055101 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.947112083 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.947282076 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.947282076 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.947468042 CET	55275	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.947495937 CET	443	55275	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.949388027 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.949409962 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.949625015 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.949800968 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.949816942 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.999197006 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.999414921 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:23.999517918 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:23.999989986 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.000009060 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.000087976 CET	55273	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.000094891 CET	443	55273	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.003407001 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.003441095 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.003655910 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.003757000 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.003771067 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.123177052 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.124639988 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.124639988 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.124661922 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.124674082 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.265026093 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.265103102 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.265180111 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.265501022 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.265516996 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.265543938 CET	55277	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.265549898 CET	443	55277	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.268699884 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.268729925 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.269001007 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.269001007 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.269027948 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.665179014 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.666011095 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.666094065 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.666703939 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.666719913 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.683624983 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.684263945 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.684282064 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.684977055 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.684982061 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.716044903 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.716547966 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.716573000 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.716979027 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.716984987 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.757201910 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.757652044 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.757668972 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.758140087 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.758146048 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.802886963 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.802984953 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.803172112 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.803220034 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.803245068 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.803252935 CET	55278	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.803261995 CET	443	55278	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.806032896 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.806068897 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.806158066 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.806308985 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.806322098 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.820384026 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.820441961 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.820486069 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.820631981 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.820647001 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.820657969 CET	55279	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.820662975 CET	443	55279	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.823297024 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.823331118 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.823394060 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.823550940 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.823564053 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.856395960 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.856425047 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.856476068 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.856482983 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.856523037 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.856792927 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.856806040 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.856811047 CET	55280	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.856816053 CET	443	55280	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.859729052 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.859780073 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.859875917 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.860050917 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.860068083 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.893913031 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.894121885 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.894186020 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.894328117 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.894340992 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.894351006 CET	55281	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.894356966 CET	443	55281	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.897711039 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.897744894 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:24.897804976 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.897994995 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:24.898008108 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.038363934 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.038919926 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.038953066 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.039438963 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.039443970 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.099529982 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:25.099591017 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:25.099654913 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:25.180315018 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.180393934 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.180623055 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.180717945 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.180751085 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.180763006 CET	55282	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.180768967 CET	443	55282	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.183820009 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.183881044 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.184031963 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.184206963 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.184225082 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.573482037 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.574054956 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.574080944 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.574580908 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.574585915 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.575135946 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.575922012 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.575922012 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.575958014 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.575972080 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.642940998 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.643496990 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.643531084 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.644427061 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.644439936 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.648535967 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.649288893 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.649288893 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.649312019 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.649322033 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.710604906 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.710630894 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.710673094 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.710702896 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.710743904 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.711107969 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.711107969 CET	55284	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.711122990 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.711132050 CET	443	55284	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.717262030 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.717298985 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.717327118 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.717428923 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.717453957 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.717556953 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.717622042 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.717622042 CET	55283	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.717636108 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.717644930 CET	443	55283	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.717672110 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.717685938 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.719829082 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.719873905 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.720060110 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.720060110 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.720092058 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.782610893 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.782718897 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.782887936 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.782887936 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.782939911 CET	55285	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.782960892 CET	443	55285	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.785190105 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.785223007 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.785300016 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.785525084 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.785540104 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.827994108 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.828025103 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.828078032 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.828185081 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.828257084 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.828257084 CET	55286	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.828267097 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.828274012 CET	443	55286	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.830404997 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.830447912 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.830621004 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.830754042 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.830768108 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.957811117 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.958340883 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.958384037 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:25.958822012 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:25.958830118 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.095998049 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.096060038 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.096349955 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.096349955 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.096560001 CET	55287	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.096581936 CET	443	55287	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.099330902 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.099368095 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.099582911 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.099582911 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.099610090 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.362911940 CET	55227	443	192.168.2.4	142.250.185.132
Oct 29, 2024 16:07:26.362943888 CET	443	55227	142.250.185.132	192.168.2.4
Oct 29, 2024 16:07:26.493032932 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.493719101 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.493747950 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.494112968 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.494118929 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.508167028 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.509094954 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.509094954 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.509130001 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.509150982 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.559917927 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.560448885 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.560477972 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.560792923 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.560797930 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.595088959 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.595659971 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.595702887 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.596065998 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.596072912 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.629894972 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.629961967 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.630183935 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.630275011 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.630290985 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.630300045 CET	55288	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.630305052 CET	443	55288	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.633475065 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.633528948 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.633640051 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.633846998 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.633861065 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.651547909 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.651892900 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.652096987 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.652137995 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.652153969 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.652164936 CET	55289	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.652169943 CET	443	55289	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.655133963 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.655177116 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.655282974 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.655459881 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.655474901 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.700184107 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.700213909 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.700264931 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.700272083 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.700314045 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.700557947 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.700567961 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.700594902 CET	55290	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.700599909 CET	443	55290	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.703767061 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.703800917 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.704046965 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.704221964 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.704232931 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.733191967 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.733258963 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.733517885 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.733555079 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.733572960 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.733583927 CET	55291	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.733589888 CET	443	55291	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.736926079 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.736952066 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.737194061 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.737332106 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.737344027 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.884234905 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.884865046 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.884907007 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:26.885395050 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:26.885400057 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.024296999 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.024378061 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.024430990 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.024698019 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.024718046 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.024732113 CET	55292	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.024736881 CET	443	55292	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.027481079 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.027528048 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.027609110 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.027825117 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.027837992 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.389645100 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.391104937 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.391123056 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.391638041 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.391643047 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.401293993 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.402110100 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.402142048 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.403008938 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.403013945 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.502398014 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.502954960 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.502971888 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.503400087 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.503406048 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.503792048 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.504312038 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.504338026 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.504482031 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.504487038 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.529426098 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.529499054 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.529721975 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.529793978 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.529813051 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.529824972 CET	55293	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.529830933 CET	443	55293	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.532723904 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.532758951 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.532876015 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.533134937 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.533144951 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.539685965 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.539726019 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.539781094 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.539792061 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.539872885 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.540404081 CET	55294	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.540422916 CET	443	55294	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.545223951 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.545260906 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.545399904 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.545527935 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.545536995 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.644259930 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.644340992 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.644588947 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.644622087 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.644622087 CET	55296	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.644638062 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.644646883 CET	443	55296	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.645237923 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.645313978 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.645416975 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.645801067 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.645801067 CET	55295	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.645817041 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.645827055 CET	443	55295	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.648427010 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.648462057 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.648612976 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.649405956 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.649410009 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.649421930 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.649449110 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.649676085 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.649676085 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.649705887 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.792315960 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.793050051 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.793080091 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.793369055 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.793374062 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.931292057 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.931379080 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.931618929 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.931690931 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.931714058 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.931751013 CET	55297	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.931756973 CET	443	55297	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.934695005 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.934730053 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:27.935208082 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.935208082 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:27.935231924 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.280963898 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.281716108 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.281742096 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.281955957 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.281961918 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.302429914 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.302997112 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.303014040 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.303618908 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.303626060 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.397775888 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.398685932 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.398685932 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.398709059 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.398725033 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.417929888 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.418344021 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.418370962 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.418732882 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.418740988 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.419303894 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.419332027 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.419380903 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.419497013 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.419595003 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.419595003 CET	55298	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.419611931 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.419616938 CET	443	55298	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.422404051 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.422450066 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.422650099 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.422650099 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.422691107 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.439812899 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.440007925 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.440110922 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.440110922 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.440138102 CET	55299	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.440152884 CET	443	55299	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.442233086 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.442277908 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.442444086 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.442477942 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.442495108 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.534413099 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.534487963 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.534718990 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.534718990 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.534941912 CET	55300	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.534957886 CET	443	55300	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.537229061 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.537272930 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.537545919 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.537657022 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.537672043 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.558397055 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.558521032 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.558604002 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.558808088 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.558829069 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.559012890 CET	55301	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.559020042 CET	443	55301	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.561362028 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.561393023 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.561518908 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.561678886 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.561697006 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.679683924 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.680351019 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.680366993 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.680778980 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.680784941 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.816859961 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.816899061 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.816951990 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.816999912 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.816999912 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.817320108 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.817320108 CET	55302	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.817337990 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.817348957 CET	443	55302	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.821089029 CET	55307	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.821130991 CET	443	55307	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:28.821207047 CET	55307	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.821422100 CET	55307	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:28.821435928 CET	443	55307	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.186323881 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.186789989 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.186819077 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.187246084 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.187252998 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.197082043 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.197602987 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.197633028 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.198009968 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.198014975 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.292192936 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.292671919 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.292706966 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.293507099 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.293530941 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.325139999 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.325198889 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.325253010 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.325592041 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.325608969 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.325619936 CET	55303	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.325627089 CET	443	55303	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.328083992 CET	55308	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.328140020 CET	443	55308	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.328454018 CET	55308	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.328454018 CET	55308	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.328493118 CET	443	55308	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.328850031 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.329176903 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.329204082 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.329560041 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.329566002 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.336277008 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.336683989 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.336730957 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.336745024 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.336792946 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.336833000 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.336848974 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.336858988 CET	55304	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.336863995 CET	443	55304	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.338800907 CET	55309	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.338840961 CET	443	55309	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.338917017 CET	55309	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.339118004 CET	55309	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.339132071 CET	443	55309	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.431972980 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.432046890 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.432116985 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.432250977 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.432250977 CET	55305	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.432272911 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.432285070 CET	443	55305	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.434092045 CET	55310	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.434119940 CET	443	55310	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.434176922 CET	55310	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.434396982 CET	55310	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.434412003 CET	443	55310	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.495031118 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.495054960 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.495095968 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.495112896 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.495152950 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.495237112 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.495248079 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.495256901 CET	55306	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.495261908 CET	443	55306	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.497364044 CET	55311	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.497389078 CET	443	55311	13.107.253.45	192.168.2.4
Oct 29, 2024 16:07:29.497453928 CET	55311	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.497756004 CET	55311	443	192.168.2.4	13.107.253.45
Oct 29, 2024 16:07:29.497770071 CET	443	55311	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 16:06:10.430361986 CET	53	59396	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:10.507597923 CET	53	50004	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:11.899349928 CET	60544	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:11.899532080 CET	49224	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:11.916250944 CET	53	49224	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:11.917474031 CET	53	60544	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:13.701306105 CET	53	60045	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:14.162350893 CET	60188	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:14.162616014 CET	60136	53	192.168.2.4	1.1.1.1
Oct 29, 2024 16:06:14.270644903 CET	53	60136	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:14.270657063 CET	53	60188	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:26.118544102 CET	53	61133	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:26.884176970 CET	138	138	192.168.2.4	192.168.2.255
Oct 29, 2024 16:06:28.743693113 CET	53	53286	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:30.652081966 CET	53	54973	1.1.1.1	192.168.2.4
Oct 29, 2024 16:06:49.463701963 CET	53	54116	1.1.1.1	192.168.2.4
Oct 29, 2024 16:07:09.308131933 CET	53	50203	1.1.1.1	192.168.2.4
Oct 29, 2024 16:07:12.335009098 CET	53	56774	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 16:06:11.899349928 CET	192.168.2.4	1.1.1.1	0xe386	Standard query (0)	portal.csr24.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:06:11.899532080 CET	192.168.2.4	1.1.1.1	0x7443	Standard query (0)	portal.csr24.com	65	IN (0x0001)	false
Oct 29, 2024 16:06:14.162350893 CET	192.168.2.4	1.1.1.1	0xe219	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:06:14.162616014 CET	192.168.2.4	1.1.1.1	0x19a2	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 16:06:11.916250944 CET	1.1.1.1	192.168.2.4	0x7443	No error (0)	portal.csr24.com			65	IN (0x0001)	false
Oct 29, 2024 16:06:11.917474031 CET	1.1.1.1	192.168.2.4	0xe386	No error (0)	portal.csr24.com		217.163.76.10	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:06:11.917474031 CET	1.1.1.1	192.168.2.4	0xe386	No error (0)	portal.csr24.com		217.163.76.9	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:06:14.270644903 CET	1.1.1.1	192.168.2.4	0x19a2	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 16:06:14.270657063 CET	1.1.1.1	192.168.2.4	0xe219	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:06:23.568149090 CET	1.1.1.1	192.168.2.4	0x1bb6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:06:23.568149090 CET	1.1.1.1	192.168.2.4	0x1bb6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:07:04.183106899 CET	1.1.1.1	192.168.2.4	0x75e6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:07:04.183106899 CET	1.1.1.1	192.168.2.4	0x75e6	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:07:04.183106899 CET	1.1.1.1	192.168.2.4	0x75e6	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 29, 2024 16:07:22.809726000 CET	1.1.1.1	192.168.2.4	0x4de5	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 16:07:22.809726000 CET	1.1.1.1	192.168.2.4	0x4de5	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

portal.csr24.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	217.163.76.10	443	3448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:06:12 UTC	792	OUT	GET /mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$ HTTP/1.1 Host: portal.csr24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 15:06:12 UTC	316	IN	HTTP/1.1 404 Unable to find Agency Date: Tue, 29 Oct 2024 15:06:12 GMT Content-Type: text/html Content-Length: 1245 Connection: close Cache-Control: private,no-cache, no-store Pragma: no-cache Expires: 0 Set-Cookie: .ASPXAUTH=; expires=Tue, 12-Oct-1999 06:00:00 GMT; path=/; HttpOnly; SameSite=None; Secure
2024-10-29 15:06:12 UTC	1968	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 64 61 74 61 3a 20 2a 2e 63 73 72 32 34 2e 63 6f 6d 20 2a 2e 63 68 61 74 72 61 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 79 6e 64 69 63 61 74 69 6f 6e 2e 74 77 69 6d 67 2e 63 6f 6d 20 2a 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 20 2a 2e 69 6e 74 65 72 63 6f 6d 2e 69 6f 20 2a 2e 69 6e 74 65 72 63 6f 6d 63 64 6e 2e 63 Data Ascii: Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: .csr24.com .chatra.io https://cdn.syndication.twimg.com .doubleclick.net .facebook.com .facebook.net .google-analytics.com .googleapis.com .intercom.io *.intercomcdn.c
2024-10-29 15:06:12 UTC	454	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil
2024-10-29 15:06:12 UTC	791	IN	Data Raw: 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c Data Ascii: x;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	217.163.76.10	443	3448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:06:13 UTC	888	OUT	GET /favicon.ico HTTP/1.1 Host: portal.csr24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=4oa4Htyqf91DCEbZ0RLo0bzUcVBXso4j1SXyDPz4oQk-1730214372-1.0.1.1-YevTUHQ51SbfwgfOcwlvi2Ls3DJeMCTHu98L9cFIvHyGNqvG.zVE_ceQKEbvSpbOoC1bj707OH5k1GmFw2WNUw
2024-10-29 15:06:13 UTC	360	IN	HTTP/1.1 404 Not Found Date: Tue, 29 Oct 2024 15:06:13 GMT Content-Type: text/html Content-Length: 1245 Connection: close p3p: CP="CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" CF-Cache-Status: HIT Age: 257 Expires: Tue, 29 Oct 2024 19:06:13 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8da411786cb4e5b9-DFW
2024-10-29 15:06:13 UTC	1009	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil
2024-10-29 15:06:13 UTC	236	IN	Data Raw: 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: tainer"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:06:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 15:06:16 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=78512 Date: Tue, 29 Oct 2024 15:06:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:06:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 15:06:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=78565 Date: Tue, 29 Oct 2024 15:06:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 15:06:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	55180	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:04 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:05 UTC	561	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:04 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150704Z-17fbfdc98bbgm62892kdp1w19800000005sg00000000a73x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:05 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 15:07:05 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-29 15:07:05 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-29 15:07:05 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-29 15:07:05 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-29 15:07:05 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-29 15:07:05 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-29 15:07:06 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-29 15:07:06 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-29 15:07:06 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	55182	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:07 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150707Z-r1755647c66hpt4fmfneq8rup800000003u000000000d08e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	55181	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:07 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150707Z-r1755647c66pzcrw3ktqe96x2s00000007zg000000006gwg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	55184	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150707Z-17fbfdc98bbgnnfwq36myy7z0g00000007c0000000002xx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	55183	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 8f1f3dd8-601e-0097-4789-28f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150707Z-r1755647c66mmrln9nsykf75u800000005pg00000000dens x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	55185	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 7920d540-e01e-0085-1f11-29c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150707Z-17fbfdc98bbtwz55a8v24wfkdw00000007vg0000000085ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	55186	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1041074d-101e-0034-30b5-2596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150708Z-r1755647c66ldhdjeavapf4fd000000006n000000000dd49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	55188	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150708Z-r1755647c66vxbtprd2g591tyg00000006dg000000003ezf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	55187	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:08 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150708Z-r1755647c66x2fg5vpbex0bd84000000080g00000000dw27 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	55190	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:08 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:08 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d6813257-101e-0034-034f-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150708Z-17fbfdc98bbzsht4r5d3e0kyc0000000061g0000000009u9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:08 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	55189	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150708Z-17fbfdc98bbsq6qfu114w62x8n00000005fg00000000bb7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	55191	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150709Z-r1755647c66tsn7nz9wda692z0000000053g00000000607h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	55194	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150709Z-17fbfdc98bb2xwflv0w9dps90c00000007eg00000000cb7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	55193	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150709Z-17fbfdc98bb6vp4m3kc0kte9cs00000007f0000000009c1b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	55192	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: fcb0891e-801e-007b-6669-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150709Z-r1755647c66ss75qkr31zpy1kc000000069000000000c0wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	55195	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:09 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:09 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150709Z-17fbfdc98bbp77nqf5g2c5aavs00000006cg000000005t34 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	55196	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 898be286-601e-003d-2804-276f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150710Z-r1755647c664nptf1txg2psens00000005k0000000008hcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	55197	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150710Z-r1755647c66mmrln9nsykf75u800000005ug000000005kpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	55199	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150710Z-17fbfdc98bb7jfvg3dxcbz5xm000000004yg00000000ambv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	55200	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:10 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 214ea441-b01e-00ab-0e9b-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150710Z-17fbfdc98bbh7l5skzh3rekksc000000084g000000004334 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:10 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	55201	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bb58e6ef-e01e-000c-4187-288e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150710Z-r1755647c66x7vzx9armv8e3cw00000008cg000000005tqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	55202	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150710Z-17fbfdc98bbtwz55a8v24wfkdw00000007z000000000047d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	55204	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: faf669f2-101e-0065-23a4-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150710Z-r1755647c66ljccje5cnds62nc00000005fg0000000066ma x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	55203	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150711Z-r1755647c665dwkwce4e7gadz000000007g000000000as8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	55206	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:11 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:11 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150711Z-r1755647c66mmrln9nsykf75u800000005qg00000000c7ya x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:11 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	55205	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:11 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: c80232df-501e-00a3-48ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150711Z-r1755647c66f4bf880huw27dwc0000000830000000005xcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	55208	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:11 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0883ffbf-f01e-001f-3811-295dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150711Z-r1755647c666s72wx0z5rz6s6000000007qg00000000auub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	55209	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:11 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 08308beb-701e-001e-43b0-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150711Z-r1755647c66hbclz9tgqkaxg2w000000087g00000000a3g0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	55207	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:11 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150711Z-r1755647c66tsn7nz9wda692z000000004z000000000cv7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	55211	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:11 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 45317ed5-a01e-0098-2767-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150711Z-r1755647c66pzcrw3ktqe96x2s00000007vg00000000bzgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	55210	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:11 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 346ac1b5-f01e-003f-6ed5-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150712Z-r1755647c66ldhdjeavapf4fd000000006p000000000c4f5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	55213	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:12 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:12 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150712Z-17fbfdc98bbtwz55a8v24wfkdw00000007z000000000049e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	55212	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:12 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150712Z-17fbfdc98bbp77nqf5g2c5aavs00000006e0000000002re0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	55214	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150712Z-17fbfdc98bbtwz55a8v24wfkdw00000007t000000000c0a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	55215	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:12 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150712Z-r1755647c6688lj6g0wg0rqr1400000006xg00000000827v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	55216	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:12 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:12 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150712Z-r1755647c66xdwzbrg67s9avs4000000073000000000brke x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:13 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	55217	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:13 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:13 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150713Z-17fbfdc98bblfj7gw4f18guu28000000087g000000002ufa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:13 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	55220	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:13 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:13 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150713Z-r1755647c66vxbtprd2g591tyg00000006d0000000004yac x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:13 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	55218	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:13 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 08340ebf-701e-001e-35b1-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150713Z-r1755647c665dwkwce4e7gadz000000007d000000000d7z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	55221	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:13 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 2399187d-801e-008f-5f67-282c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150713Z-r1755647c66hbclz9tgqkaxg2w000000085000000000dq5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	55219	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:14 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:14 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: ca0e8e6b-b01e-00ab-6a67-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150714Z-17fbfdc98bb8mkvjfkt54wa53800000004hg00000000bpm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	55222	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:14 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150714Z-17fbfdc98bbvvplhck7mbap4bw000000089000000000bqyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:14 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	55223	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:14 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150714Z-r1755647c66t77qv3m6k1gb3zw000000068g00000000cxhk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	55224	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:14 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:14 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2125f972-501e-0035-10a3-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150714Z-r1755647c66hlhp26bqv22ant400000006w0000000008b57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:14 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	55225	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:14 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:14 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:14 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150714Z-r1755647c66ss75qkr31zpy1kc00000006bg0000000082t2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:14 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	55226	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150715Z-17fbfdc98bbwmxz5amc6q625w000000002rg000000006cwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	55228	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:15 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: d145a723-401e-0067-13b1-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150715Z-17fbfdc98bbvvplhck7mbap4bw00000008ag00000000a1tc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	55229	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:15 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:15 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 64bb7fc7-f01e-0071-5d6f-28431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150715Z-17fbfdc98bbwj6cp6df5812g4s00000008a0000000003735 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	55230	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:15 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:15 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150715Z-17fbfdc98bbjwdgn5g1mr5hcxn00000004ng0000000061dw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	55231	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:15 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 86dc56c9-201e-00aa-5987-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150715Z-r1755647c66tgwsmrrc4e69sk000000005zg000000009h8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	55232	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:15 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 39bce04a-301e-0051-2eae-2638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150715Z-r1755647c666qwwlm3r555dyqc00000006v000000000bfpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	55233	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:16 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: a8de1b79-001e-0017-5ba3-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150716Z-r1755647c668pfkhys7b5xnv2n000000076g00000000c3gn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	55235	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:16 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 57638fd1-a01e-0053-7b67-288603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150716Z-r1755647c66hxv26qums8q8fsw00000004y0000000000dda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	55234	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:16 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150716Z-r1755647c66hxv26qums8q8fsw00000004u000000000a18c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	55236	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:16 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:16 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150716Z-r1755647c6688lj6g0wg0rqr1400000006wg000000009sc6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	55237	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:16 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:16 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150716Z-r1755647c66z67vn9nc21z11a80000000650000000003zh1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	55238	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:17 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150717Z-r1755647c66tgwsmrrc4e69sk0000000062g0000000024g1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:17 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	55240	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:17 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:17 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 18df47ae-c01e-00a1-2249-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150717Z-17fbfdc98bbl4n669ut4r27e0800000006bg00000000879a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:17 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	55239	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:17 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:17 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150717Z-17fbfdc98bb5d4fn785en176rg00000006t0000000004w6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:17 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	55241	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:17 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ca6c0e2f-901e-008f-5413-2667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150717Z-17fbfdc98bbbnx4ldgze4de5zs00000005a000000000879e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	55242	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:17 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:17 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:17 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150717Z-17fbfdc98bbtf4jxpev5grnmyw00000006x0000000005rtm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:17 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	55243	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 481bd859-201e-00aa-219c-273928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150718Z-r1755647c66hpt4fmfneq8rup800000003ug00000000d4vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	55245	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2ac474a9-a01e-0098-14a3-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150718Z-17fbfdc98bb8mkvjfkt54wa53800000004sg000000000wfc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	55244	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150718Z-r1755647c66hbclz9tgqkaxg2w00000008a0000000004h95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	55246	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:18 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:18 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 04de2316-001e-0082-3987-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150718Z-17fbfdc98bbnvkgdqtwd2nmyz800000005hg00000000b3ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:18 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	55247	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:18 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150718Z-17fbfdc98bbwj6cp6df5812g4s000000088g000000006pyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	55248	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:19 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: b7beb219-701e-0097-1404-27b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150719Z-r1755647c66qg7mpa8m0fzcvy000000007v000000000atth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	55250	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cf3643bb-401e-0078-69a3-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150719Z-r1755647c66pzcrw3ktqe96x2s0000000820000000000q3g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	55249	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150719Z-r1755647c66x2fg5vpbex0bd84000000087g00000000223q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	55251	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:19 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 75e7650a-001e-0079-12c4-2612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150719Z-r1755647c668lcmr2va34xxa5s00000005a000000000b97r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	55252	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:19 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: b8f0a3b1-001e-0017-5067-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150719Z-17fbfdc98bbsq6qfu114w62x8n00000005f000000000a3wd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	55255	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:20 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150720Z-r1755647c66z67vn9nc21z11a800000005zg00000000e1ay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:20 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	55254	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150720Z-17fbfdc98bbh7l5skzh3rekksc000000080000000000bcmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	55253	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:20 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150720Z-17fbfdc98bb6kklk3r0qwaavtw00000004k000000000cvva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	55256	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:20 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e0a2f103-c01e-007a-3367-28b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150720Z-17fbfdc98bbz4mxcabnudsmquw00000005sg000000004nss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	55257	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:20 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:20 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: bed91e61-d01e-0017-7ef4-26b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150720Z-17fbfdc98bbgm62892kdp1w19800000005ug00000000611g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:20 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	55260	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:20 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150721Z-r1755647c66qg7mpa8m0fzcvy000000007zg000000000nxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:21 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	55259	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:21 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: d08917dd-901e-0064-7ab2-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150721Z-r1755647c66z67vn9nc21z11a8000000062g00000000akqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:21 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	55258	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:21 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150721Z-r1755647c66ljccje5cnds62nc00000005h0000000002n2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:21 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	55261	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150721Z-17fbfdc98bb9xxzfyggrfrbqmw00000005z000000000ag3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:21 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	55262	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:21 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d72005e7-a01e-0002-1a61-285074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150721Z-17fbfdc98bbbnx4ldgze4de5zs000000057g00000000bbgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:21 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	55263	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:21 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 1515cbe5-b01e-0084-6467-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150721Z-17fbfdc98bbz4mxcabnudsmquw00000005n000000000bkk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:22 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	55265	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150721Z-r1755647c66tgwsmrrc4e69sk000000005x000000000ckwx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	55264	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150722Z-17fbfdc98bbds27mnhu6ftg4d800000004z000000000cpsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	55266	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:21 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150722Z-r1755647c66x2fg5vpbex0bd840000000870000000002gvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	55267	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:22 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150722Z-17fbfdc98bbgm62892kdp1w19800000005x00000000011q8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	55268	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:22 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150722Z-17fbfdc98bbzsht4r5d3e0kyc000000005vg00000000bfmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	55269	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:22 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:22 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150722Z-17fbfdc98bb6kklk3r0qwaavtw00000004r0000000005uha x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	55270	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:22 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150722Z-r1755647c66mrgwz6d897uymaw00000000pg0000000049ba x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	55271	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:22 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150722Z-r1755647c66ljccje5cnds62nc00000005c000000000cmz6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	55272	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:23 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:23 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150723Z-r1755647c66tsn7nz9wda692z0000000050000000000b3mu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:23 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	55274	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:23 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:23 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:23 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9cbc9553-801e-008f-2aa3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150723Z-17fbfdc98bb5d4fn785en176rg00000006q000000000ayg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	55273	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:23 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:23 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150723Z-r1755647c666s72wx0z5rz6s6000000007pg00000000cets x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:23 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	55276	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:23 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:23 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 17a5a9a5-201e-0003-7b36-28f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150723Z-17fbfdc98bb2rxf2hfvcfz540000000004ng0000000099hv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:23 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	55275	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:23 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:23 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:23 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150723Z-r1755647c66vpf8fnbgmzm21hs00000007hg00000000ddth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:23 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	55277	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:24 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:24 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:24 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150724Z-17fbfdc98bbgm62892kdp1w19800000005vg00000000418w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:24 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	55278	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:24 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c21b1165-c01e-008e-596f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150724Z-17fbfdc98bbtf4jxpev5grnmyw00000006sg00000000bgx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	55279	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:24 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 08154944-901e-0083-2112-29bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150724Z-17fbfdc98bbt5dtr27n1qp1eqc00000006vg00000000b499 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	55280	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:24 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 672cac94-f01e-00aa-27b2-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150724Z-r1755647c668pfkhys7b5xnv2n00000007a0000000004cwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	55281	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:24 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:24 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: ead33fc5-401e-0029-0967-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150724Z-r1755647c66x7vzx9armv8e3cw00000008dg000000004n37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	55282	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:25 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:25 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 4bfb087f-501e-008f-4c9c-279054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150725Z-r1755647c666s72wx0z5rz6s6000000007p000000000cbzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	55284	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:25 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:25 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:25 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150725Z-r1755647c664nptf1txg2psens00000005p000000000009k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:25 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	55283	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:25 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:25 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150725Z-17fbfdc98bbvvplhck7mbap4bw00000008a000000000arft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	55285	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:25 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:25 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:25 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150725Z-17fbfdc98bbbnx4ldgze4de5zs00000005b00000000062xu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:25 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	55286	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:25 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:25 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:25 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150725Z-r1755647c665dwkwce4e7gadz000000007k0000000005xya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:25 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	55287	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:25 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:26 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:26 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 04ace5c9-101e-007a-5c26-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150726Z-r1755647c666s72wx0z5rz6s6000000007vg000000000gnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:26 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	55288	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:26 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:26 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:26 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c91d50fe-d01e-0049-5267-28e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150726Z-17fbfdc98bbfmg5wrf1ctcuuun00000006zg00000000bxaf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:26 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	55289	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:26 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:26 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:26 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150726Z-17fbfdc98bbnvkgdqtwd2nmyz800000005ng0000000092h7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:26 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	55290	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:26 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:26 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 19d379a2-b01e-0084-4b5b-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150726Z-17fbfdc98bblfj7gw4f18guu280000000860000000006n9q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	55291	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:26 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:26 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150726Z-17fbfdc98bbvvplhck7mbap4bw00000008f0000000000m3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	55292	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:26 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:27 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:26 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 43b0bec6-701e-0050-4289-286767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150726Z-r1755647c66ljccje5cnds62nc00000005e0000000009h2p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	55293	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:27 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:27 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f459058d-801e-0015-12e0-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150727Z-r1755647c66ldhdjeavapf4fd000000006s0000000007ywb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	55294	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:27 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:27 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150727Z-r1755647c66pzcrw3ktqe96x2s0000000820000000000qba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	55295	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:27 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:27 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e871c79c-701e-005c-74c5-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150727Z-r1755647c666qwwlm3r555dyqc00000006wg00000000ahbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	55296	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:27 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:27 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150727Z-r1755647c666s72wx0z5rz6s6000000007sg000000007afc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	55297	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:27 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:27 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 84f987b9-901e-0083-2ea3-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150727Z-17fbfdc98bb6kklk3r0qwaavtw00000004q0000000007q4g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	55298	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:28 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:28 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150728Z-17fbfdc98bbt5dtr27n1qp1eqc00000006z00000000042cc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	55299	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:28 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:28 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0ad7b348-901e-0067-0d67-28b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150728Z-17fbfdc98bbgm62892kdp1w19800000005s000000000bs80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	55300	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:28 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:28 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150728Z-r1755647c66qg7mpa8m0fzcvy000000007xg0000000051tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	55301	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:28 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:28 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150728Z-r1755647c66vpf8fnbgmzm21hs00000007s0000000000q85 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	55302	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:28 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:28 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:28 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8055f236-801e-0083-4e87-28f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150728Z-r1755647c666s72wx0z5rz6s6000000007n000000000dxnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:28 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	55303	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:29 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:29 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:29 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150729Z-17fbfdc98bbnsg5pw6rasm3q8s0000000730000000009nrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:29 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	55304	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:29 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:29 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:29 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 260950aa-801e-00a3-269d-277cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150729Z-17fbfdc98bblzxqcphe71tp4qw000000022g000000007ts1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:29 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	55305	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:29 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:29 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:29 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150729Z-r1755647c66vpf8fnbgmzm21hs00000007kg00000000bwpf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:29 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	55306	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:29 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:29 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:29 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150729Z-r1755647c66kcsqh9hy6eyp6kw00000004vg00000000c2q8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:29 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	55308	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:30 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:30 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:30 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 30963bf2-701e-0001-2a98-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150730Z-r1755647c668lcmr2va34xxa5s00000005bg0000000089fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:30 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	55310	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:30 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:30 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:30 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150730Z-17fbfdc98bb2rxf2hfvcfz540000000004ng0000000099zg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:30 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	55309	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:30 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:30 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:30 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 92c6748a-601e-0001-5ca3-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150730Z-r1755647c66kcsqh9hy6eyp6kw00000004v000000000cqd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:30 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	55311	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:30 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:30 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:30 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150730Z-r1755647c66z67vn9nc21z11a8000000061g00000000br7m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:30 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	55307	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:30 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:30 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:30 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 28aaec9d-301e-0033-281d-26fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150730Z-r1755647c6688lj6g0wg0rqr1400000006wg000000009t1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 15:07:30 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	55312	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:31 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:31 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150731Z-17fbfdc98bbvvplhck7mbap4bw00000008b000000000971c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:31 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	55314	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:31 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:31 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:31 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150731Z-17fbfdc98bbx59j5xd9kpbrs8400000006800000000046sw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:31 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	55313	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:31 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:31 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b7d5c986-501e-005b-0250-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150731Z-17fbfdc98bb8lw78ye6qppf97g000000074g00000000avkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:31 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	55315	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:31 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:31 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:31 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: bb02c222-c01e-00ad-7da4-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150731Z-r1755647c66trqwgqbys9wk81g000000059g0000000073bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:31 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	55316	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 15:07:31 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 15:07:31 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 15:07:31 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: c79115df-401e-008c-03b0-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T150731Z-17fbfdc98bbl4n669ut4r27e08000000068000000000cvpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 15:07:31 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	11:06:03
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:06:07
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1936,i,453894502974441255,17825873918836266513,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:06:10
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:55178 -> 1.1.1.1:53

Source: global traffic	HTTP traffic detected: GET /mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$ HTTP/1.1Host: portal.csr24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: portal.csr24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=4oa4Htyqf91DCEbZ0RLo0bzUcVBXso4j1SXyDPz4oQk-1730214372-1.0.1.1-YevTUHQ51SbfwgfOcwlvi2Ls3DJeMCTHu98L9cFIvHyGNqvG.zVE_ceQKEbvSpbOoC1bj707OH5k1GmFw2WNUw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: portal.csr24.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4500, Parent PID: 2736

General

Chronological Activities

Analysis Process: chrome.exePID: 3448, Parent PID: 4500

General

Chronological Activities

Analysis Process: chrome.exePID: 6312, Parent PID: 2736

General

Chronological Activities

Disassembly

Windows Analysis Report
https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$