Edit tour

Windows Analysis Report
https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE

Overview

General Information

Sample URL:	https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE
Analysis ID:	1545880
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,6935731795475849158,12118422567334037329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 NOT FOUNDContent-Type: text/plainContent-Length: 0Connection: closeDate: Thu, 31 Oct 2024 08:05:30 GMTServer: msys-httpX-Cache: Error from cloudfrontVia: 1.1 6be461c5a9399007c1540eee90371674.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P7X-Amz-Cf-Id: IszS6_rhHEmgMIcfw2MOGUEPAJaVlYSiMa6_SDsSl3IdfvBTlGRddw==Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Source: unknown	Network traffic detected: HTTP traffic on port 57141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57127
Source: unknown	Network traffic detected: HTTP traffic on port 57106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57129
Source: unknown	Network traffic detected: HTTP traffic on port 57129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57132
Source: unknown	Network traffic detected: HTTP traffic on port 57170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57139
Source: unknown	Network traffic detected: HTTP traffic on port 57095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57147
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57143
Source: unknown	Network traffic detected: HTTP traffic on port 57135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57149
Source: unknown	Network traffic detected: HTTP traffic on port 57130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57156
Source: unknown	Network traffic detected: HTTP traffic on port 57096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57157
Source: unknown	Network traffic detected: HTTP traffic on port 57153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57158
Source: unknown	Network traffic detected: HTTP traffic on port 57067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57151
Source: unknown	Network traffic detected: HTTP traffic on port 57073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57154
Source: unknown	Network traffic detected: HTTP traffic on port 57111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57150
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57045
Source: unknown	Network traffic detected: HTTP traffic on port 57105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57162
Source: unknown	Network traffic detected: HTTP traffic on port 57175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57163
Source: unknown	Network traffic detected: HTTP traffic on port 57181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57161
Source: unknown	Network traffic detected: HTTP traffic on port 57080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57102
Source: unknown	Network traffic detected: HTTP traffic on port 57068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57103
Source: unknown	Network traffic detected: HTTP traffic on port 57128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57109
Source: unknown	Network traffic detected: HTTP traffic on port 57162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57105
Source: unknown	Network traffic detected: HTTP traffic on port 57101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57114
Source: unknown	Network traffic detected: HTTP traffic on port 57092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57110
Source: unknown	Network traffic detected: HTTP traffic on port 57134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57119
Source: unknown	Network traffic detected: HTTP traffic on port 57123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57116
Source: unknown	Network traffic detected: HTTP traffic on port 57140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57120
Source: unknown	Network traffic detected: HTTP traffic on port 57179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57121
Source: unknown	Network traffic detected: HTTP traffic on port 57041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57093
Source: unknown	Network traffic detected: HTTP traffic on port 57075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57095
Source: unknown	Network traffic detected: HTTP traffic on port 57098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57091
Source: unknown	Network traffic detected: HTTP traffic on port 57058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57056
Source: unknown	Network traffic detected: HTTP traffic on port 57071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57059
Source: unknown	Network traffic detected: HTTP traffic on port 57094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57176
Source: unknown	Network traffic detected: HTTP traffic on port 57159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57171
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57172
Source: unknown	Network traffic detected: HTTP traffic on port 57142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57065
Source: unknown	Network traffic detected: HTTP traffic on port 57183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57066
Source: unknown	Network traffic detected: HTTP traffic on port 57177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57183
Source: unknown	Network traffic detected: HTTP traffic on port 57099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57075
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57077
Source: unknown	Network traffic detected: HTTP traffic on port 57044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57073
Source: unknown	Network traffic detected: HTTP traffic on port 57077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57089
Source: unknown	Network traffic detected: HTTP traffic on port 57154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57087
Source: unknown	Network traffic detected: HTTP traffic on port 57072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57083
Source: unknown	Network traffic detected: HTTP traffic on port 57137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57080

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:57045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:57046 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:57054 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/2@4/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,6935731795475849158,12118422567334037329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,6935731795475849158,12118422567334037329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
d34h7y6y02b7ih.cloudfront.net	108.138.26.107	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
clicks.eventbrite.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE	false		unknown
https://clicks.eventbrite.com/favicon.ico	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.26.107	d34h7y6y02b7ih.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545880
Start date and time:	2024-10-31 09:04:30 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/2@4/4

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 74.125.71.84, 216.58.212.174, 34.104.35.123, 52.149.20.212, 199.232.210.172, 20.242.39.171, 192.229.221.95, 20.3.187.198, 142.250.185.227
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	3.2829630187996184
Encrypted:	false
SSDEEP:	3:CUdSkL1ps6n:XSk/s6
MD5:	BCB6C4FC194839F926530E3A1ECF34B9
SHA1:	93A2B401A0923A30A97A165E5FA3BA89A4C2B776
SHA-256:	D1C4AA4FC27CA65D42B693B60F19546C4A50C002394C364DBBEF45710858DF7A
SHA-512:	5720FD6FB0F99F0F896C9D1269C6FE33911A1EBAD25C1ED4D5A0F60D8E21EF963B1873C0EB0B41740F5816AB63612812D35D1BC2BCD402CB05D099EF9E72D1C5
Malicious:	false
Reputation:	low
URL:	https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE
Preview:	GIF89a.............!.......,...........L..;.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 09:05:26.071458101 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 09:05:28.706796885 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:28.706851006 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:28.706926107 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:28.707210064 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:28.707231998 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:28.707292080 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:28.707396984 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:28.707417011 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:28.707588911 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:28.707600117 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.550321102 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.550620079 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.550647974 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.551026106 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.551091909 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.551762104 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.551810026 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.552679062 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.552742958 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.552927971 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.552934885 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.553759098 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.553941965 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.553956032 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.554338932 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.554394960 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.555042028 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.555088043 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.555227995 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.555284023 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.604727983 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.715147018 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.715161085 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.823374033 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.940943003 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.941109896 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:29.941195011 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.942193031 CET	57040	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:29.942210913 CET	443	57040	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:30.031476021 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:30.075337887 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:30.418512106 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:30.418591022 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:30.418667078 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:30.422861099 CET	57041	443	192.168.2.4	108.138.26.107
Oct 31, 2024 09:05:30.422885895 CET	443	57041	108.138.26.107	192.168.2.4
Oct 31, 2024 09:05:30.434379101 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:30.434418917 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:30.434494972 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:30.434710026 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:30.434725046 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:31.286238909 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:31.291624069 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:31.291651011 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:31.292521000 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:31.292577028 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:31.294555902 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:31.294615030 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:31.341613054 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:31.341640949 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:31.388494015 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:33.004621983 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:33.004676104 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:33.004916906 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:33.006931067 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:33.006947041 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:33.853199959 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:33.853611946 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:33.862679958 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:33.862689972 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:33.863034964 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:33.904103994 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:34.012651920 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:34.055377960 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:34.255223036 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:34.255311012 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:34.255361080 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:34.256370068 CET	57045	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:34.256392956 CET	443	57045	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:34.321924925 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:34.321969986 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:34.322033882 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:34.323502064 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:34.323513985 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.176563978 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.176717043 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:35.178360939 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:35.178374052 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.178704023 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.187165022 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:35.227334023 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.432437897 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.432517052 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.433523893 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:35.434457064 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:35.434472084 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:35.434518099 CET	57046	443	192.168.2.4	184.28.90.27
Oct 31, 2024 09:05:35.434523106 CET	443	57046	184.28.90.27	192.168.2.4
Oct 31, 2024 09:05:41.297621965 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:41.297714949 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:05:41.297920942 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:42.103404045 CET	57044	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:05:42.103415966 CET	443	57044	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:18.799633980 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:18.799741030 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:18.800213099 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:18.800213099 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:18.800291061 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:19.547374964 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:19.547457933 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:19.550988913 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:19.551017046 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:19.551290035 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:19.573929071 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:19.615336895 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.032210112 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.032234907 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.032274961 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.032305002 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.032388926 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.032430887 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.032453060 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.034069061 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.034090996 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.034130096 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.034147024 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.034179926 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.034200907 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.148703098 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.148732901 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.148791075 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.148817062 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.148847103 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.148888111 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.262929916 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.262955904 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.263020039 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.263046980 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.263077021 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.263097048 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.264411926 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.264436007 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.264484882 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.264499903 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.264525890 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.264547110 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.379194975 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.379220009 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.379291058 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.379334927 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.379383087 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.494204998 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.494235992 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.494297981 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.494316101 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.494353056 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.494370937 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.495982885 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.496000051 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.496052027 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.496068001 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.496095896 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.496113062 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.609548092 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.609572887 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.609741926 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.609766006 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.611382008 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.611401081 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.611509085 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.611509085 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.611529112 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.611670971 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.725073099 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.725094080 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.725245953 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.725267887 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.725372076 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.764277935 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.764300108 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.764422894 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.764444113 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.768210888 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.840508938 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.840533018 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.840677977 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.840697050 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.841141939 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.841150999 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.841166019 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.841200113 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.841243029 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.841372013 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.841372967 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.841418982 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.841459036 CET	57054	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.841480017 CET	443	57054	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.913520098 CET	57056	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.913563967 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.913640022 CET	57056	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.913799047 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.913842916 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.915131092 CET	57056	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.915132999 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.915157080 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.915163994 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.915196896 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.915219069 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.915357113 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.915371895 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.917562962 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.917563915 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.917571068 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.917584896 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.917841911 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.917855024 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.917882919 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.917882919 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.918009043 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.918016911 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:20.918195009 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:20.918215036 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.664635897 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.665718079 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.665781021 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.666174889 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.666898966 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.666996956 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.667013884 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.668194056 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.668220043 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.668751955 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.668801069 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.669595957 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.669601917 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.670182943 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.670193911 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.671494007 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.671498060 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.672530890 CET	57056	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.672548056 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.673871040 CET	57056	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.673882008 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.673980951 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.674002886 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.675193071 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.675201893 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.802242994 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.802274942 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.802326918 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.802346945 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.802397013 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.802498102 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.802642107 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.802695036 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.802963972 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.802999973 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.803056955 CET	57058	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.803071976 CET	443	57058	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.803088903 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.803108931 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.803148985 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.803149939 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.803188086 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.805424929 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.805609941 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.805660963 CET	57056	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.808269024 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.808290958 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.808335066 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.808346033 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.808384895 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.812760115 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.812814951 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.812876940 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.813071012 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.813092947 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.813106060 CET	57059	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.813112020 CET	443	57059	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.814166069 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.814186096 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.814829111 CET	57055	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.814847946 CET	443	57055	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.819549084 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.819557905 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.819571972 CET	57057	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.819575071 CET	443	57057	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.847815990 CET	57056	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.847834110 CET	443	57056	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.852819920 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.852857113 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.852917910 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.853357077 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.853368044 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.860685110 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.860699892 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.860753059 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.861881971 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.861896992 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.864729881 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.864738941 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.864789963 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.866702080 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.866734982 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.866796970 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.867291927 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.867307901 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:21.867358923 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:21.867367029 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.561214924 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.561855078 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.561897039 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.562179089 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.562186003 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.606426001 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.607085943 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.607085943 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.607108116 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.607120037 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.609649897 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.610008955 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.610033035 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.610261917 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.610266924 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.614178896 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.614785910 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.614785910 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.614799023 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.614814997 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.653069973 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.653740883 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.653740883 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.653763056 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.653774023 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.695899963 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.696032047 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.696139097 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.696192980 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.696192980 CET	57060	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.696209908 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.696218967 CET	443	57060	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.698647022 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.698683977 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.698894978 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.698894978 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.698924065 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.742314100 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.742505074 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.742645979 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.742645979 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.742674112 CET	57061	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.742688894 CET	443	57061	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.744959116 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.744985104 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.745167017 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.745255947 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.745268106 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.745467901 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.745574951 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.745673895 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.745673895 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.745852947 CET	57064	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.745858908 CET	443	57064	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.747490883 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.747502089 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.747751951 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.747827053 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.747837067 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.750176907 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.750585079 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.750663996 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.750663996 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.750690937 CET	57063	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.750701904 CET	443	57063	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.752620935 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.752700090 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.752916098 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.752917051 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.752995968 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.807209015 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.807288885 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.807496071 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.807496071 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.807585001 CET	57062	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.807602882 CET	443	57062	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.809628010 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.809672117 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:22.809813023 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.809880018 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:22.809887886 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.476022959 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.476495028 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.476526976 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.477024078 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.477031946 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.495126009 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.495804071 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.495804071 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.495827913 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.495846033 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.502351999 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.502697945 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.502717018 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.503086090 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.503092051 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.530293941 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.530983925 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.530983925 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.531064034 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.531105995 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.568569899 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.569009066 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.569034100 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.569427967 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.569437027 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.615603924 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.615863085 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.615930080 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.615983009 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.616004944 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.616024971 CET	57065	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.616034985 CET	443	57065	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.618715048 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.618807077 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.618882895 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.619028091 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.619076967 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.632183075 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.632325888 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.632375956 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.632405996 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.632422924 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.632435083 CET	57066	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.632438898 CET	443	57066	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.634381056 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.634421110 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.634483099 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.634623051 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.634637117 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.637114048 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.637209892 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.637355089 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.637377024 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.637386084 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.637397051 CET	57067	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.637401104 CET	443	57067	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.639060974 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.639085054 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.639148951 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.639342070 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.639358997 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.667845964 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.668000937 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.668060064 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.668133020 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.668133020 CET	57068	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.668159962 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.668195963 CET	443	57068	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.669800997 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.669835091 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.669903040 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.670149088 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.670166016 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.704495907 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.704727888 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.704772949 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.704812050 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.704830885 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.704843998 CET	57069	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.704849958 CET	443	57069	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.706753969 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.706768990 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:23.706851959 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.706974030 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:23.706990004 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.372225046 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.372916937 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.372941017 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.373321056 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.373326063 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.384958982 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.385420084 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.385448933 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.385922909 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.385930061 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.403815985 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.404201984 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.404230118 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.404741049 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.404748917 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.445662022 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.446214914 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.446280003 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.446619987 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.446635008 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.470566034 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.470879078 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.470909119 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.471220016 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.471225977 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.508224964 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.508403063 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.508518934 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.508599043 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.508599043 CET	57070	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.508644104 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.508667946 CET	443	57070	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.511135101 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.511228085 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.511306047 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.511431932 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.511487961 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.522651911 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.522713900 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.522773981 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.522919893 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.522919893 CET	57071	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.522937059 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.522947073 CET	443	57071	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.524991035 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.525012970 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.525188923 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.525326014 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.525336981 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.541274071 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.541416883 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.541521072 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.541521072 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.541629076 CET	57072	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.541646957 CET	443	57072	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.543929100 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.543996096 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.544174910 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.544174910 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.544246912 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.585009098 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.585212946 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.585283041 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.585361958 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.585362911 CET	57073	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.585398912 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.585429907 CET	443	57073	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.587351084 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.587382078 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.587534904 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.589804888 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.589816093 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.608186007 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.608433008 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.608647108 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.608647108 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.608727932 CET	57074	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.608746052 CET	443	57074	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.611072063 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.611131907 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:24.611510992 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.611510992 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:24.611579895 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.259825945 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.260335922 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.260417938 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.260798931 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.260812998 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.287270069 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.287934065 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.287962914 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.288455963 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.288463116 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.314002037 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.314889908 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.314891100 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.314959049 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.315001011 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.361428976 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.361885071 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.361906052 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.362364054 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.362369061 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.376313925 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.376729012 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.376758099 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.377165079 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.377177000 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.394432068 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.394702911 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.394881964 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.394881964 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.395112991 CET	57075	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.395158052 CET	443	57075	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.397291899 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.397330999 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.397445917 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.397505045 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.397511005 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.427670002 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.427833080 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.427910089 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.427910089 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.427944899 CET	57076	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.427961111 CET	443	57076	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.430109978 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.430146933 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.430218935 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.430427074 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.430444002 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.452429056 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.452512980 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.452603102 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.452655077 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.452655077 CET	57077	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.452688932 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.452716112 CET	443	57077	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.454818010 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.454853058 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.455041885 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.455041885 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.455071926 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.502546072 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.502688885 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.502788067 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.502788067 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.502809048 CET	57078	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.502816916 CET	443	57078	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.505026102 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.505043983 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.505110025 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.505254984 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.505268097 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.513159990 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.513380051 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.513477087 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.513477087 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.513539076 CET	57079	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.513556004 CET	443	57079	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.515474081 CET	57084	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.515522957 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:25.515698910 CET	57084	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.515698910 CET	57084	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:25.515723944 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.151489019 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.151971102 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.151988029 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.152369022 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.152374029 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.182215929 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.182610989 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.182638884 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.182969093 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.182975054 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.218221903 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.218615055 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.218635082 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.219002008 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.219006062 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.266984940 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.267308950 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.267324924 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.267797947 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.267802954 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.286292076 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.286608934 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.286667109 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.286958933 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.286973000 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.286983013 CET	57080	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.286988974 CET	443	57080	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.289098978 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.289138079 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.289278030 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.290005922 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.290020943 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.308527946 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.313560009 CET	57084	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.313570976 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.317226887 CET	57084	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.317231894 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.318067074 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.318825960 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.318911076 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.320456982 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.320470095 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.320480108 CET	57081	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.320485115 CET	443	57081	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.331089973 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.331127882 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.331248045 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.331706047 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.331722975 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.402335882 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.402800083 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.402996063 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.404705048 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.404963017 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.405033112 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.417601109 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.417617083 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.417654037 CET	57082	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.417659044 CET	443	57082	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.424618959 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.424626112 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.424639940 CET	57083	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.424643993 CET	443	57083	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.437536955 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.437570095 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.437767029 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.439240932 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.439289093 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.439358950 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.440150976 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.440167904 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.440411091 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.440432072 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.456213951 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.456338882 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.456440926 CET	57084	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.456887960 CET	57084	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.456902027 CET	443	57084	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.463999033 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.464060068 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:26.464241028 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.464607954 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:26.464629889 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.057316065 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.061662912 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.061662912 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.061706066 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.061728001 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.100354910 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.100877047 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.100895882 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.102083921 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.102097034 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.178967953 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.180104017 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.180144072 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.181798935 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.181806087 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.193535089 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.193676949 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.194140911 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.194241047 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.194242001 CET	57085	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.194281101 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.194303989 CET	443	57085	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.198219061 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.198318005 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.198415041 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.198523998 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.198564053 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.203896046 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.204293013 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.204329967 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.206154108 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.206166983 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.239295006 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.239373922 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.239567995 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.239567995 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.239804983 CET	57086	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.239823103 CET	443	57086	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.242489100 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.242522955 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.243963003 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.244443893 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.244458914 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.256161928 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.256884098 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.256885052 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.256973028 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.257010937 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.315671921 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.315718889 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.315861940 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.315861940 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.315896034 CET	57088	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.315912008 CET	443	57088	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.317549944 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.317625999 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.317789078 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.317789078 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.317890882 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.344561100 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.344717979 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.344964027 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.345024109 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.345025063 CET	57087	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.345060110 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.345082998 CET	443	57087	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.348176003 CET	57094	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.348205090 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.348486900 CET	57094	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.348486900 CET	57094	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.348520994 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.397381067 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.397607088 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.397686958 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.397767067 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.397767067 CET	57089	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.397810936 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.397825003 CET	443	57089	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.400311947 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.400367975 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.400607109 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.400607109 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.400672913 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.951803923 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.953099966 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.953146935 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:27.954220057 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:27.954235077 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.015846014 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.016797066 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.016819954 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.018198967 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.018203020 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.067290068 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.068317890 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.068347931 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.069597006 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.069608927 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.087971926 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.088182926 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.088246107 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.089099884 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.089099884 CET	57091	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.089153051 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.089181900 CET	443	57091	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.094141960 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.094183922 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.094238043 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.094546080 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.094558954 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.111417055 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.112478018 CET	57094	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.112498999 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.113694906 CET	57094	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.113698959 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.153337002 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.153525114 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.153593063 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.155167103 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.155180931 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.155189037 CET	57092	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.155194044 CET	443	57092	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.161453009 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.161509991 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.161567926 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.161811113 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.161829948 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.164791107 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.165216923 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.165237904 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.165771961 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.165783882 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.204842091 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.205261946 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.205327988 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.205461979 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.205461979 CET	57093	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.205496073 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.205518961 CET	443	57093	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.209189892 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.209223986 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.209289074 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.209388018 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.209402084 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.250549078 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.250962019 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.251019001 CET	57094	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.251056910 CET	57094	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.251066923 CET	443	57094	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.254501104 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.254559994 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.254618883 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.254863024 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.254883051 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.302093029 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.302284002 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.302448988 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.302448988 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.302504063 CET	57095	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.302525043 CET	443	57095	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.306171894 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.306201935 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.306261063 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.306622028 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.306641102 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.834585905 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.835124969 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.835146904 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.836801052 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.836806059 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.947808981 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.948743105 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.948743105 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.948774099 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.948784113 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.953258991 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.953804016 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.953846931 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.954127073 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.954132080 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.971426964 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.971590042 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.971693993 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.971693993 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.971721888 CET	57096	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.971736908 CET	443	57096	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.974180937 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.974226952 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:28.974392891 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.974446058 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:28.974453926 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.016571045 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.016916037 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.016947985 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.017275095 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.017281055 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.046803951 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.047429085 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.047429085 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.047456980 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.047468901 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.088125944 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.088320971 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.088511944 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.088512897 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.088557959 CET	57098	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.088574886 CET	443	57098	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.091046095 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.091094971 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.091260910 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.091413021 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.091438055 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.097120047 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.097233057 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.097354889 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.097354889 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.097354889 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.099390030 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.099432945 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.099878073 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.099879026 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.099947929 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.152987003 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.153145075 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.153321981 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.153321981 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.153321981 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.155056000 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.155083895 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.155319929 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.155319929 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.155343056 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.183275938 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.183501005 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.183932066 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.183985949 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.183985949 CET	57100	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.184001923 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.184012890 CET	443	57100	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.190085888 CET	57105	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.190105915 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.193969011 CET	57105	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.197925091 CET	57105	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.197936058 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.399255991 CET	57097	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.399296045 CET	443	57097	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.461750984 CET	57099	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.461765051 CET	443	57099	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.723265886 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.723706007 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.723789930 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.724864006 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.724879026 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.850131035 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.850965977 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.850970984 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.852118969 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.852123976 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.860960960 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.861320019 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.861381054 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.861443996 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.861443996 CET	57101	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.861485004 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.861509085 CET	443	57101	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.866673946 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.866717100 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.866780043 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.867285013 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.867300987 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.872596025 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.873251915 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.873274088 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.874440908 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.874454021 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.910026073 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.910686016 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.910702944 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.911552906 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.911556959 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.933952093 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.934778929 CET	57105	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.934794903 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.935669899 CET	57105	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.935677052 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.987375021 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.987425089 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.987463951 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.987850904 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.987860918 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.987879038 CET	57102	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.987884045 CET	443	57102	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.996490002 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.996520042 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:29.996577024 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.996794939 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:29.996807098 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.015892982 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.015939951 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.015980959 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.016362906 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.016383886 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.016402960 CET	57103	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.016408920 CET	443	57103	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.020378113 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.020415068 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.020483971 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.020822048 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.020838976 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.046907902 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.047014952 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.047070980 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.047413111 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.047430992 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.047460079 CET	57104	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.047466040 CET	443	57104	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.052324057 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.052342892 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.052407980 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.052660942 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.052671909 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.068331957 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.068496943 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.068536997 CET	57105	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.068682909 CET	57105	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.068694115 CET	443	57105	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.100442886 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.100501060 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.100567102 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.110296011 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.110326052 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.630868912 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.631341934 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.631380081 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.631812096 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.631818056 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.747751951 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.748632908 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.748632908 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.748658895 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.748675108 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.765844107 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:30.765928030 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:30.768785954 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.768920898 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.768954992 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:30.769181013 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:30.769216061 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:30.769251108 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.769560099 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.769573927 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.769608021 CET	57106	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.769613981 CET	443	57106	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.772512913 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.795144081 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.795188904 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.797508001 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.797508955 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.797521114 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.797538996 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.797784090 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.798154116 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.798178911 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.807219982 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.810924053 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.810941935 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.813908100 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.813913107 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.851063967 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.851573944 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.851610899 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.852006912 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.852019072 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.883682013 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.883821964 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.883959055 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.883959055 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.884073019 CET	57107	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.884088039 CET	443	57107	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.886868000 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.886909008 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.887069941 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.887120008 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.887134075 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.945496082 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.945586920 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.945718050 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.945718050 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.945791960 CET	57109	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.945806026 CET	443	57109	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.947685003 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.947727919 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.947983980 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.947983980 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.948043108 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.985608101 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.985822916 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.985924959 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.985924959 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.985977888 CET	57110	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.986006021 CET	443	57110	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.987780094 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.987797976 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:30.987962961 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.988023043 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:30.988030910 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.080637932 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.080722094 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.080955982 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.081054926 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.081054926 CET	57108	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.081091881 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.081132889 CET	443	57108	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.083506107 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.083558083 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.083774090 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.083914995 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.083935022 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.563668013 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.564107895 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.564143896 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.564578056 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.564590931 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.616921902 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:31.617237091 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:31.617255926 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:31.617578983 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:31.617965937 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:31.618043900 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:31.643116951 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.643537045 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.643565893 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.643929005 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.643935919 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.664863110 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:31.704073906 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.704343081 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.704405069 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.704449892 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.704449892 CET	57112	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.704480886 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.704514980 CET	443	57112	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.706901073 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.706934929 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.707138062 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.707279921 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.707293034 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.710809946 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.711112022 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.711142063 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.711458921 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.711468935 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.758081913 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.758404970 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.758431911 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.758894920 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.758902073 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.780085087 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.780395985 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.780447006 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.780478001 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.780492067 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.780503035 CET	57113	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.780508041 CET	443	57113	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.782682896 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.782764912 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.782953978 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.783096075 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.783129930 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.828310013 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.828775883 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.828802109 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.829169035 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.829180002 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.848997116 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.849174976 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.849307060 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.849353075 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.849353075 CET	57114	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.849378109 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.849397898 CET	443	57114	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.851613045 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.851654053 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.851710081 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.851831913 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.851845980 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.895162106 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.895426035 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.895481110 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.895500898 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.895509958 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.895519972 CET	57115	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.895524979 CET	443	57115	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.897388935 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.897428036 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.897599936 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.897711992 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.897727013 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.962776899 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.962985039 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.963042021 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.963098049 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.963098049 CET	57116	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.963129997 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.963154078 CET	443	57116	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.965025902 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.965065002 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:31.965121031 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.965250969 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:31.965264082 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.461332083 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.461935043 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.461949110 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.462357998 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.462363958 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.537542105 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.538055897 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.538131952 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.538536072 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.538552999 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.597373962 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.597796917 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.597913980 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.597913980 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.597913980 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.600277901 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.600321054 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.600466967 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.600538969 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.600548029 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.616360903 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.617093086 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.617093086 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.617115021 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.617125034 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.660907030 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.661582947 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.661582947 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.661603928 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.661621094 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.673685074 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.673872948 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.674046040 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.674046040 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.674046040 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.676105976 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.676140070 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.676352024 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.676352024 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.676382065 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.718581915 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.719258070 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.719258070 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.719273090 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.719281912 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.755115986 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.755264997 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.755369902 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.755369902 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.755506992 CET	57119	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.755518913 CET	443	57119	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.757391930 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.757502079 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.757705927 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.757774115 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.757795095 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.796447039 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.796746969 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.796819925 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.796870947 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.796870947 CET	57120	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.796888113 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.796896935 CET	443	57120	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.798829079 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.798861980 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.798998117 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.799068928 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.799074888 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.805900097 CET	57117	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.805913925 CET	443	57117	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.856209040 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.856297970 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.856467009 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.856467009 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.856559992 CET	57121	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.856578112 CET	443	57121	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.859030962 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.859095097 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.859309912 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.859385014 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.859407902 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:32.977757931 CET	57118	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:32.977792978 CET	443	57118	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.363826036 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.364777088 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.364777088 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.364804029 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.364821911 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.421736002 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.422122002 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.422151089 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.422550917 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.422557116 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.502156019 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.502370119 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.502464056 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.502520084 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.502536058 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.502571106 CET	57122	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.502577066 CET	443	57122	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.505321026 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.505356073 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.505561113 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.505827904 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.505840063 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.515244961 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.515883923 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.515908003 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.517875910 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.517882109 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.558336973 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.558837891 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.558919907 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.558959961 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.558959961 CET	57123	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.558984041 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.558996916 CET	443	57123	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.561530113 CET	57128	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.561582088 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.561656952 CET	57128	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.561773062 CET	57128	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.561794996 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.565675020 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.566025019 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.566032887 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.566560030 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.566562891 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.597767115 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.598104954 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.598124027 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.598550081 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.598556995 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.651175022 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.651585102 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.651645899 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.651679039 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.651699066 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.651712894 CET	57124	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.651720047 CET	443	57124	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.654136896 CET	57129	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.654176950 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.654320955 CET	57129	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.654459953 CET	57129	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.654474974 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.705415964 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.705579996 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.705629110 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.705720901 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.705737114 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.705746889 CET	57125	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.705753088 CET	443	57125	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.707741976 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.707793951 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.707945108 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.708072901 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.708105087 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.735429049 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.735543966 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.735605955 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.735646963 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.735647917 CET	57126	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.735687017 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.735707045 CET	443	57126	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.737445116 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.737462044 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:33.737648010 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.737781048 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:33.737797022 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.274312019 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.275028944 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.275043011 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.275769949 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.275775909 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.299964905 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.300578117 CET	57128	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.300656080 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.301317930 CET	57128	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.301338911 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.407171011 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.407562971 CET	57129	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.407586098 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.408301115 CET	57129	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.408305883 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.417917967 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.418064117 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.418124914 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.418215036 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.418232918 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.418242931 CET	57127	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.418248892 CET	443	57127	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.424716949 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.424808979 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.424921989 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.425316095 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.425354958 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.433523893 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.433737993 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.433799982 CET	57128	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.433932066 CET	57128	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.433948040 CET	443	57128	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.436392069 CET	57133	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.436419964 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.436516047 CET	57133	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.436683893 CET	57133	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.436697006 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.460694075 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.461251974 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.461272955 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.462507963 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.462521076 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.528079033 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.528512001 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.528528929 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.529288054 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.529294014 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.540518999 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.540702105 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.540750027 CET	57129	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.541788101 CET	57129	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.541799068 CET	443	57129	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.546761990 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.546792984 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.547008038 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.547209024 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.547249079 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.601809978 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.602129936 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.602202892 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.603338003 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.603357077 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.603394985 CET	57130	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.603411913 CET	443	57130	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.607532024 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.607561111 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.607786894 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.608072042 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.608084917 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.671788931 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.671865940 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.672079086 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.674287081 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.674287081 CET	57131	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.674297094 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.674304962 CET	443	57131	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.720355034 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.720376968 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:34.720453024 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.730289936 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:34.730304956 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.162672043 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.163115978 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.163161993 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.163544893 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.163561106 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.251049042 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.251461029 CET	57133	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.251472950 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.251996994 CET	57133	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.252002954 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.290062904 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.290874004 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.290903091 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.291945934 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.291958094 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.298036098 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.298089981 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.298233986 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.298255920 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.298290968 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.298362970 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.298566103 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.298610926 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.298645973 CET	57132	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.298660994 CET	443	57132	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.306603909 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.306679964 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.306891918 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.307107925 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.307141066 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.360596895 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.361040115 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.361057043 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.361727953 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.361732960 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.388822079 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.388892889 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.389198065 CET	57133	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.389342070 CET	57133	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.389352083 CET	443	57133	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.394012928 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.394041061 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.394108057 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.394392967 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.394407034 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.425936937 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.426135063 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.426196098 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.426487923 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.426512957 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.426537991 CET	57134	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.426548958 CET	443	57134	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.430264950 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.430305958 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.430438042 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.430691004 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.430711985 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.496478081 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.496526003 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.496603966 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.496613979 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.496642113 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.496684074 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.496980906 CET	57135	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.496989012 CET	443	57135	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.501880884 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.501898050 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.502065897 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.502362013 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.502370119 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.510170937 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.510945082 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.510957003 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.511904955 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.511909962 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.649115086 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.649139881 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.649190903 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.649208069 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.649250984 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.649255991 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.649274111 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.649317980 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.650059938 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.650077105 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.650088072 CET	57136	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.650093079 CET	443	57136	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.654659033 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.654730082 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:35.654804945 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.655253887 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:35.655284882 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.085170031 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.085813999 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.085880041 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.086740017 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.086751938 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.190789938 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.192054987 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.192080021 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.192533016 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.192538977 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.194792986 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.196043015 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.196089029 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.196881056 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.196892023 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.225433111 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.225487947 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.225574970 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.225594044 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.225771904 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.225804090 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.225826025 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.226130962 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.226201057 CET	443	57137	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.226265907 CET	57137	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.228698015 CET	57142	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.228730917 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.228895903 CET	57142	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.229161024 CET	57142	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.229173899 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.268275023 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.268596888 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.268606901 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.268986940 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.268992901 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.334520102 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.334655046 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.334752083 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.334856033 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.334856987 CET	57139	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.334901094 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.334928989 CET	443	57139	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.336257935 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.336323977 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.336375952 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.336877108 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.336886883 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.337008953 CET	57138	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.337013960 CET	443	57138	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.338670015 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.338709116 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.338790894 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.339219093 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.339247942 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.340429068 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.340464115 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.340528965 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.340671062 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.340681076 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.404310942 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.404397964 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.404452085 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.404555082 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.404568911 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.404580116 CET	57140	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.404587030 CET	443	57140	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.406450987 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.406482935 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.406547070 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.406680107 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.406697035 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.407195091 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.407495022 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.407530069 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.407854080 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.407866001 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.543186903 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.543247938 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.543308973 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.543400049 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.543420076 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.543469906 CET	57141	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.543483973 CET	443	57141	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.545131922 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.545149088 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.545312881 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.545423985 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.545433998 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.988712072 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.990009069 CET	57142	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.990031004 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:36.990780115 CET	57142	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:36.990788937 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.087265015 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.087776899 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.087799072 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.088259935 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.088278055 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.115456104 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.115902901 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.115930080 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.116539001 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.116549015 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.125057936 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.125227928 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.125289917 CET	57142	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.125416994 CET	57142	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.125435114 CET	443	57142	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.128541946 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.128575087 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.128722906 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.128956079 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.128968000 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.164349079 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.164720058 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.164731026 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.165144920 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.165149927 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.223661900 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.223717928 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.223778963 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.224081993 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.224096060 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.224106073 CET	57144	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.224112034 CET	443	57144	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.227643013 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.227667093 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.227817059 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.236479044 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.236489058 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.253139019 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.253276110 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.253488064 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.253680944 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.253681898 CET	57143	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.253707886 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.253745079 CET	443	57143	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.301639080 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.301702976 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.301763058 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.328151941 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.328233957 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.328310966 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.328943014 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.328957081 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.328990936 CET	57145	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.328996897 CET	443	57145	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.330427885 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.330466032 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.332222939 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.332267046 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.332331896 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.332482100 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.332498074 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.897933960 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.898531914 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.898546934 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.899043083 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.899048090 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.992140055 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.994237900 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.994247913 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:37.994864941 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:37.994870901 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.039472103 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.039551973 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.039608955 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.039813995 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.039829016 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.039843082 CET	57147	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.039848089 CET	443	57147	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.045563936 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.045680046 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.045763016 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.046009064 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.046031952 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.086749077 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.087348938 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.087377071 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.088159084 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.088171959 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.120790005 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.123574018 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.123589039 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.124984026 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.124989033 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.132282972 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.132456064 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.132498026 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.132549047 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.132575989 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.132658958 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.132669926 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.132680893 CET	57148	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.132685900 CET	443	57148	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.135067940 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.135111094 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.135212898 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.135370016 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.135410070 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.224107981 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.225409985 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.225469112 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.225544930 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.225544930 CET	57149	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.225570917 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.225596905 CET	443	57149	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.227952003 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.227982044 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.228054047 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.228213072 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.228223085 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.261262894 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.261367083 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.261442900 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.261454105 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.261471987 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.261522055 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.261651039 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.261651039 CET	57150	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.261667967 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.261676073 CET	443	57150	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.263855934 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.263900995 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.263971090 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.264096975 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.264128923 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.380448103 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.380912066 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.380935907 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.381360054 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.381365061 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.547328949 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.547389030 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.547553062 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.547614098 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.547626019 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.547660112 CET	57146	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.547666073 CET	443	57146	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.550415039 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.550448895 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.550621986 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.550805092 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.550816059 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.829166889 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.830069065 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.830070019 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.830121040 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.830142021 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.923249960 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.924113035 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.924113989 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.924146891 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.924186945 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.971343040 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.971412897 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.971597910 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.971597910 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.971657038 CET	57151	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.971687078 CET	443	57151	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.974153996 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.974189997 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.974309921 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.974436998 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.974452972 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.979599953 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.980292082 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.980292082 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:38.980304956 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:38.980320930 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.028364897 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.028964043 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.029016972 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.029455900 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.029469013 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.066457033 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.066535950 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.066723108 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.066924095 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.066953897 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.066987038 CET	57152	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.067002058 CET	443	57152	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.069626093 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.069667101 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.070178986 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.070506096 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.070519924 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.116861105 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.116997957 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.117089987 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.117275953 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.117275953 CET	57153	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.117288113 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.117302895 CET	443	57153	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.120845079 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.120867968 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.121280909 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.121280909 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.121309042 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.169167995 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.169267893 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.169369936 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.169373035 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.169476986 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.169476986 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.169528961 CET	57154	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.169550896 CET	443	57154	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.171655893 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.171685934 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.171787977 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.171907902 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.171916008 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.316435099 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.317235947 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.317236900 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.317250013 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.317264080 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.462475061 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.462538004 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.462737083 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.462769985 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.462769985 CET	57155	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.462784052 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.462795019 CET	443	57155	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.465468884 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.465521097 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.465668917 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.465770960 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.465797901 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.738660097 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.739103079 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.739130020 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.739546061 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.739554882 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.822016954 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.822371960 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.822391033 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.822845936 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.822851896 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.877739906 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.877901077 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.877983093 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.878037930 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.878053904 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.878068924 CET	57156	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.878074884 CET	443	57156	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.880934954 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.880971909 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.881040096 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.881160975 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.881174088 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.884598970 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.884938002 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.884947062 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.885337114 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.885341883 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.918626070 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.918945074 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.918956041 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.919303894 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.919308901 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.958019018 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.958102942 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.958153009 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.958245993 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.958261013 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.958271027 CET	57157	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.958276987 CET	443	57157	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.960406065 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.960453033 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:39.960515976 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.960690975 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:39.960711002 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.023360014 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.023416042 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.023510933 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.023521900 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.023569107 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.023755074 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.023763895 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.023818016 CET	57158	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.023823023 CET	443	57158	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.025729895 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.025747061 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.025860071 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.025995970 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.026005983 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.053431034 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.053570986 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.053811073 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.053966045 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.053983927 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.053993940 CET	57159	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.054001093 CET	443	57159	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.057713032 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.057753086 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.057892084 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.061346054 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.061362982 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.215487003 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.215856075 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.215884924 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.216286898 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.216294050 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.353605986 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.353682041 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.353727102 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.353769064 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.353809118 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.353903055 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.353923082 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.353941917 CET	57160	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.353949070 CET	443	57160	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.356535912 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.356586933 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.356715918 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.356878996 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.356899977 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.651926041 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.652829885 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.652829885 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.652844906 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.652859926 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.701397896 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.702106953 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.702106953 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.702166080 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.702191114 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.789583921 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.789665937 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.789782047 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.789858103 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.789871931 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.789942026 CET	57161	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.789947033 CET	443	57161	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.792416096 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.792463064 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.792536974 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.792656898 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.792671919 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.799859047 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.800224066 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.800237894 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.800674915 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.800679922 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.816962957 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.817631960 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.817631960 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.817647934 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.817665100 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.838907003 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.838970900 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.839118958 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.839221954 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.839266062 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.839293957 CET	57162	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.839309931 CET	443	57162	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.841161966 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.841196060 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.841499090 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.841594934 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.841614008 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.936171055 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.936265945 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.936407089 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.936407089 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.936407089 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.938448906 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.938472986 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.938673019 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.938673019 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.938694000 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.952950954 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.953114986 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.953193903 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.953217983 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.953319073 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.953319073 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.953383923 CET	57164	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.953423023 CET	443	57164	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.955008984 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.955065966 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:40.955163956 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.955244064 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:40.955264091 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.117084026 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.118201017 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.118227005 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.118633032 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.118639946 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.241894007 CET	57163	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.241904020 CET	443	57163	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.256789923 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.256903887 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.257045031 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.257045031 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.257045031 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.259438038 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.259454966 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.259618044 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.259689093 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.259694099 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.554584980 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.554959059 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.554985046 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.555406094 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.555413008 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.570024014 CET	57165	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.570060015 CET	443	57165	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.640311003 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.640702963 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.640722990 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.641132116 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.641136885 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.657875061 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:41.657924891 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:41.658098936 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:41.693011045 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.693335056 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.693347931 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.693984985 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.693993092 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.694174051 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.694380045 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.694551945 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.694674015 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.694696903 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.694710970 CET	57166	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.694715977 CET	443	57166	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.698312044 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.698369980 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.698437929 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.698555946 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.698575974 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.719327927 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.719644070 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.719657898 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.720032930 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.720038891 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.784559965 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.784688950 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.784776926 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.784812927 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.784812927 CET	57167	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.784827948 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.784837961 CET	443	57167	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.787331104 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.787348986 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.787419081 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.787847042 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.787861109 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.828337908 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.828368902 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.828413010 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.828516960 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.828543901 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.828561068 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.828571081 CET	57168	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.828576088 CET	443	57168	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.831199884 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.831233025 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.831300020 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.831415892 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.831432104 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.862332106 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.862479925 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.862555027 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.862858057 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.862895966 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.862924099 CET	57169	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.862942934 CET	443	57169	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.865142107 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.865160942 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:41.865221024 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.865523100 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:41.865536928 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.001617908 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.011054993 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.011065006 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.011590958 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.011595011 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.110596895 CET	57111	443	192.168.2.4	142.250.186.164
Oct 31, 2024 09:06:42.110630989 CET	443	57111	142.250.186.164	192.168.2.4
Oct 31, 2024 09:06:42.360796928 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.360863924 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.360986948 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.361128092 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.361138105 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.361172915 CET	57170	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.361177921 CET	443	57170	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.363894939 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.363980055 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.364058018 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.364217043 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.364248991 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.499744892 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.500143051 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.500193119 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.500570059 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.500586033 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.541012049 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.541310072 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.541341066 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.541687012 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.541697979 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.584887028 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.585632086 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.585632086 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.585665941 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.585717916 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.607829094 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.608520985 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.608520985 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.608536959 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.608550072 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.635538101 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.635582924 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.635844946 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.635844946 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.635844946 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.638310909 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.638345003 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.638627052 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.638703108 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.638725042 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.678663015 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.678689003 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.678728104 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.678761005 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.678926945 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.679008961 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.679008961 CET	57172	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.679025888 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.679034948 CET	443	57172	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.681514025 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.681603909 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.681729078 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.681838036 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.681874990 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.721060991 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.721237898 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.721369028 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.721369028 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.721389055 CET	57173	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.721396923 CET	443	57173	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.723339081 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.723359108 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.723505974 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.723581076 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.723587990 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.740448952 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.740722895 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.740861893 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.740861893 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.740906954 CET	57174	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.740926981 CET	443	57174	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.742860079 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.742896080 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.743292093 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.743292093 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.743371010 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:42.942882061 CET	57171	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:42.942939997 CET	443	57171	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.110268116 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.110796928 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.110821009 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.111233950 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.111241102 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.246778011 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.246840954 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.247066021 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.247066021 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.247180939 CET	57175	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.247211933 CET	443	57175	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.249571085 CET	57180	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.249598980 CET	443	57180	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.249731064 CET	57180	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.249954939 CET	57180	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.249965906 CET	443	57180	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.384305000 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.384849072 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.384859085 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.385495901 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.385500908 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.446377039 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.447118998 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.447118998 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.447180986 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.447221994 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.480087042 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.480835915 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.480835915 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.480848074 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.480860949 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.501308918 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.501622915 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.501641989 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.502090931 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.502096891 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.519952059 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.520026922 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.520064116 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.520220995 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.520272970 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.520272970 CET	57176	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.520284891 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.520293951 CET	443	57176	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.522710085 CET	57181	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.522754908 CET	443	57181	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.523053885 CET	57181	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.523232937 CET	57181	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.523247957 CET	443	57181	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.586209059 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.586260080 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.586452961 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.586453915 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.586673975 CET	57177	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.586702108 CET	443	57177	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.588525057 CET	57182	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.588551044 CET	443	57182	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.588669062 CET	57182	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.588905096 CET	57182	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.588920116 CET	443	57182	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.617150068 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.617192984 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.617238045 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.617367029 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.617367029 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.617417097 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.617417097 CET	57178	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.617429018 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.617443085 CET	443	57178	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.619477987 CET	57183	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.619498014 CET	443	57183	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.619595051 CET	57183	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.619759083 CET	57183	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.619777918 CET	443	57183	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.641134024 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.641185045 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.641352892 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.641352892 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.641999006 CET	57179	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.642019987 CET	443	57179	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.643275976 CET	57184	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.643299103 CET	443	57184	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:43.643424034 CET	57184	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.643687963 CET	57184	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:43.643698931 CET	443	57184	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:44.020174026 CET	443	57180	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:44.020620108 CET	57180	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:44.020632029 CET	443	57180	13.107.253.45	192.168.2.4
Oct 31, 2024 09:06:44.021068096 CET	57180	443	192.168.2.4	13.107.253.45
Oct 31, 2024 09:06:44.021071911 CET	443	57180	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 09:05:26.974236012 CET	53	53979	1.1.1.1	192.168.2.4
Oct 31, 2024 09:05:27.046252012 CET	53	57599	1.1.1.1	192.168.2.4
Oct 31, 2024 09:05:28.309267044 CET	53	50599	1.1.1.1	192.168.2.4
Oct 31, 2024 09:05:28.684695005 CET	63935	53	192.168.2.4	1.1.1.1
Oct 31, 2024 09:05:28.686338902 CET	50998	53	192.168.2.4	1.1.1.1
Oct 31, 2024 09:05:28.696587086 CET	53	63935	1.1.1.1	192.168.2.4
Oct 31, 2024 09:05:28.714307070 CET	53	50998	1.1.1.1	192.168.2.4
Oct 31, 2024 09:05:30.425878048 CET	60589	53	192.168.2.4	1.1.1.1
Oct 31, 2024 09:05:30.426017046 CET	49734	53	192.168.2.4	1.1.1.1
Oct 31, 2024 09:05:30.433130980 CET	53	60589	1.1.1.1	192.168.2.4
Oct 31, 2024 09:05:30.433630943 CET	53	49734	1.1.1.1	192.168.2.4
Oct 31, 2024 09:05:42.904742002 CET	138	138	192.168.2.4	192.168.2.255
Oct 31, 2024 09:05:45.278167009 CET	53	61297	1.1.1.1	192.168.2.4
Oct 31, 2024 09:06:04.016021967 CET	53	61765	1.1.1.1	192.168.2.4
Oct 31, 2024 09:06:26.551812887 CET	53	61791	1.1.1.1	192.168.2.4
Oct 31, 2024 09:06:26.804080009 CET	53	57487	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 31, 2024 09:05:28.714395046 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 09:05:28.684695005 CET	192.168.2.4	1.1.1.1	0x32dd	Standard query (0)	clicks.eventbrite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:28.686338902 CET	192.168.2.4	1.1.1.1	0x91ae	Standard query (0)	clicks.eventbrite.com	65	IN (0x0001)	false
Oct 31, 2024 09:05:30.425878048 CET	192.168.2.4	1.1.1.1	0xaea1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:30.426017046 CET	192.168.2.4	1.1.1.1	0x4e35	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 09:05:28.696587086 CET	1.1.1.1	192.168.2.4	0x32dd	No error (0)	clicks.eventbrite.com	d34h7y6y02b7ih.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 09:05:28.696587086 CET	1.1.1.1	192.168.2.4	0x32dd	No error (0)	d34h7y6y02b7ih.cloudfront.net		108.138.26.107	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:28.696587086 CET	1.1.1.1	192.168.2.4	0x32dd	No error (0)	d34h7y6y02b7ih.cloudfront.net		108.138.26.98	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:28.696587086 CET	1.1.1.1	192.168.2.4	0x32dd	No error (0)	d34h7y6y02b7ih.cloudfront.net		108.138.26.124	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:28.696587086 CET	1.1.1.1	192.168.2.4	0x32dd	No error (0)	d34h7y6y02b7ih.cloudfront.net		108.138.26.27	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:28.714307070 CET	1.1.1.1	192.168.2.4	0x91ae	No error (0)	clicks.eventbrite.com	d34h7y6y02b7ih.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 09:05:30.433130980 CET	1.1.1.1	192.168.2.4	0xaea1	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:30.433630943 CET	1.1.1.1	192.168.2.4	0x4e35	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 09:05:40.437844992 CET	1.1.1.1	192.168.2.4	0xe5de	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:40.437844992 CET	1.1.1.1	192.168.2.4	0xe5de	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:05:42.357265949 CET	1.1.1.1	192.168.2.4	0x26e8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 09:05:42.357265949 CET	1.1.1.1	192.168.2.4	0x26e8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:06:00.359674931 CET	1.1.1.1	192.168.2.4	0xab9e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 09:06:00.359674931 CET	1.1.1.1	192.168.2.4	0xab9e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:06:18.798882008 CET	1.1.1.1	192.168.2.4	0x2b1d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 09:06:18.798882008 CET	1.1.1.1	192.168.2.4	0x2b1d	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 09:06:18.798882008 CET	1.1.1.1	192.168.2.4	0x2b1d	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 09:06:40.187982082 CET	1.1.1.1	192.168.2.4	0x11cf	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 09:06:40.187982082 CET	1.1.1.1	192.168.2.4	0x11cf	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clicks.eventbrite.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	57040	108.138.26.107	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:05:29 UTC	768	OUT	GET /q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE HTTP/1.1 Host: clicks.eventbrite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 08:05:29 UTC	468	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 44 Connection: close Cache-Control: no-cache, max-age=0 Date: Thu, 31 Oct 2024 08:05:29 GMT Server: msys-http X-Robots-Tag: noindex X-Cache: Miss from cloudfront Via: 1.1 78720628b37ebf3e33c42dc098252ee8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: nq9ITE3W0W7PfCaKb92RHTERRHtQaYHAWnT8uRluxOc3kt6C9r307g== Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-10-31 08:05:29 UTC	44	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b 00 Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	57041	108.138.26.107	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:05:30 UTC	702	OUT	GET /favicon.ico HTTP/1.1 Host: clicks.eventbrite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 08:05:30 UTC	417	IN	HTTP/1.1 404 NOT FOUND Content-Type: text/plain Content-Length: 0 Connection: close Date: Thu, 31 Oct 2024 08:05:30 GMT Server: msys-http X-Cache: Error from cloudfront Via: 1.1 6be461c5a9399007c1540eee90371674.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: IszS6_rhHEmgMIcfw2MOGUEPAJaVlYSiMa6_SDsSl3IdfvBTlGRddw== Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	57045	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:05:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 08:05:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=204008 Date: Thu, 31 Oct 2024 08:05:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	57046	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:05:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 08:05:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=204064 Date: Thu, 31 Oct 2024 08:05:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 08:05:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	57054	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:19 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:20 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:19 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080619Z-r1755647c66gqcpzhw8q9nhnq000000009zg0000000042r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:20 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-31 08:06:20 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	57058	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:21 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:21 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080621Z-17fbfdc98bblzxqcphe71tp4qw00000004ng000000002q1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:21 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	57059	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:21 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:21 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 63125a57-c01e-0046-4226-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080621Z-r1755647c66trqwgqbys9wk81g00000007t0000000004pws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:21 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	57057	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:21 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:21 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080621Z-r1755647c66gqcpzhw8q9nhnq000000009y00000000060hs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:21 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	57056	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:21 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:21 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080621Z-17fbfdc98bb2xwflv0w9dps90c0000000a5g000000001tdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:21 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	57055	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:21 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:21 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080621Z-r1755647c66hbclz9tgqkaxg2w0000000atg0000000044ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:21 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	57060	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:22 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080622Z-17fbfdc98bbwj6cp6df5812g4s0000000aw0000000001775 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	57061	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:22 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080622Z-r1755647c66vpf8fnbgmzm21hs0000000a4g0000000052yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	57064	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:22 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:22 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d6813257-101e-0034-034f-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080622Z-17fbfdc98bbrwwkck9bqeex26800000000qg0000000068wu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:22 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	57063	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:22 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:22 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080622Z-r1755647c66xdwzbrg67s9avs400000009p0000000004b4q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:22 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	57062	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:22 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080622Z-17fbfdc98bbwmxz5amc6q625w000000005c00000000009mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	57065	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:23 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080623Z-17fbfdc98bb7jfvg3dxcbz5xm000000007mg0000000021st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	57066	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:23 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080623Z-r1755647c66krc8kc5nnbqdves000000011g000000003uu5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	57067	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:23 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: fcb0891e-801e-007b-6669-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080623Z-r1755647c668pfkhys7b5xnv2n00000009t0000000004pyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	57068	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:23 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080623Z-r1755647c66x7vzx9armv8e3cw0000000b0000000000165u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	57069	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:23 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080623Z-r1755647c66ljccje5cnds62nc000000081g0000000025gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	57070	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:24 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:24 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 898be286-601e-003d-2804-276f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080624Z-17fbfdc98bblzxqcphe71tp4qw00000004q0000000001nnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:24 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	57071	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:24 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080624Z-r1755647c66w6f6b5182nn0u0400000007t00000000024rt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	57072	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:24 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080624Z-r1755647c66hpt4fmfneq8rup800000006k00000000011pk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	57073	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:24 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:24 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 214ea441-b01e-00ab-0e9b-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080624Z-17fbfdc98bbnsg5pw6rasm3q8s00000009ng0000000036sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:24 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	57074	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:24 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 7bd8c047-e01e-000c-239d-278e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080624Z-17fbfdc98bb7jfvg3dxcbz5xm000000007q0000000000164 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	57075	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:25 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080625Z-17fbfdc98bbh7l5skzh3rekksc0000000amg000000004bee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	57076	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:25 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080625Z-17fbfdc98bbds27mnhu6ftg4d800000007qg000000001muz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	57077	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:25 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:25 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080625Z-17fbfdc98bbt5dtr27n1qp1eqc00000009kg000000000fhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:25 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	57078	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:25 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080625Z-17fbfdc98bbwmxz5amc6q625w000000005cg0000000000yv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	57079	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:25 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:25 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2d06c87c-b01e-0021-139b-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080625Z-17fbfdc98bb6kklk3r0qwaavtw0000000780000000002gbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:25 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	57080	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:26 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:26 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 789f6287-101e-0065-355f-284088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080626Z-17fbfdc98bbh7l5skzh3rekksc0000000aq0000000001tbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:26 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	57081	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:26 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0883ffbf-f01e-001f-3811-295dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080626Z-r1755647c66vpf8fnbgmzm21hs0000000a2g0000000072qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	57082	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:26 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 08308beb-701e-001e-43b0-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080626Z-17fbfdc98bbwmxz5amc6q625w000000005bg000000000k3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	57083	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:26 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 1089ebf2-001e-0028-530d-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080626Z-r1755647c66xdwzbrg67s9avs400000009ug0000000003f9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	57084	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:26 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:26 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ae9ca414-101e-008d-470d-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080626Z-17fbfdc98bbh7l5skzh3rekksc0000000akg000000004kvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:26 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	57085	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:27 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:27 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080627Z-r1755647c668pfkhys7b5xnv2n00000009vg000000001qp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:27 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	57086	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:27 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: cbc8156d-001e-0079-70f5-2512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080627Z-r1755647c66pzcrw3ktqe96x2s0000000an0000000000nzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	57088	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:27 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b953619b-001e-0017-7a89-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080627Z-r1755647c66krc8kc5nnbqdves0000000170000000000gf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	57087	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:27 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080627Z-17fbfdc98bblzxqcphe71tp4qw00000004pg00000000210v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	57089	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:27 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:27 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080627Z-r1755647c665dwkwce4e7gadz000000009z000000000691u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:27 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	57091	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:27 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:27 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080627Z-17fbfdc98bbfmg5wrf1ctcuuun00000009h00000000064zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:28 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	57092	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:28 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:28 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080628Z-17fbfdc98bbnsg5pw6rasm3q8s00000009sg000000000pds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:28 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	57093	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:28 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 389326c4-a01e-0053-299b-278603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080628Z-r1755647c66tgwsmrrc4e69sk000000008e00000000069c9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	57094	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:28 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:28 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080628Z-r1755647c66qg7mpa8m0fzcvy00000000ah0000000000prq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:28 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	57095	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:28 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:28 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 2399187d-801e-008f-5f67-282c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080628Z-17fbfdc98bbwmxz5amc6q625w0000000059g000000001ub1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:28 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	57096	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:28 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:28 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080628Z-17fbfdc98bbds27mnhu6ftg4d800000007n00000000043uk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:28 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	57098	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:28 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:28 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 174f78f2-a01e-0032-607a-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080628Z-17fbfdc98bb8lw78ye6qppf97g00000009ng0000000064sr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:29 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	57097	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:28 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080628Z-r1755647c66tgwsmrrc4e69sk000000008gg000000004n3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	57099	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:29 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:29 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080629Z-17fbfdc98bbzsht4r5d3e0kyc000000008f0000000002zvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:29 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	57100	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:29 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:29 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a93e4d9c-801e-0015-6aa4-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080629Z-r1755647c66p58nm9wqx75pnms00000008gg000000001r65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	57101	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:29 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: d145a723-401e-0067-13b1-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080629Z-17fbfdc98bb7jfvg3dxcbz5xm000000007fg000000004d7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	57102	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:29 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 64bb7fc7-f01e-0071-5d6f-28431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080629Z-r1755647c66t77qv3m6k1gb3zw00000008ug000000005y8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	57103	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:29 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080629Z-r1755647c66bdj57qqnd8h5hp800000009wg000000003ruv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	57104	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:29 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: ba54a096-301e-0020-3719-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080629Z-17fbfdc98bb2cvg4m0cmab3ecw000000083g0000000004bd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	57105	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:29 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080629Z-17fbfdc98bbsq6qfu114w62x8n000000081g0000000036s4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	57106	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:30 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: a8de1b79-001e-0017-5ba3-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080630Z-r1755647c666s72wx0z5rz6s600000000ab0000000002gp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	57107	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:30 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080630Z-r1755647c66qg7mpa8m0fzcvy00000000af0000000002ewh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	57108	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:30 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:31 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 833bb1c5-f01e-0085-0a6b-2b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080630Z-17fbfdc98bbtwz55a8v24wfkdw0000000afg000000001da6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-31 08:06:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	57109	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:30 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 962e216e-b01e-0070-5bcb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080630Z-17fbfdc98bbwmxz5amc6q625w0000000056g0000000052xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	57110	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:30 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080630Z-r1755647c66hlhp26bqv22ant400000009a000000000642q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	57112	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:31 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:31 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080631Z-r1755647c66z67vn9nc21z11a800000008m0000000005wxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:31 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	57113	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:31 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:31 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ab84cae0-f01e-005d-23d7-2513ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080631Z-r1755647c666sbmsukk894ba7n00000006wg0000000065s4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:31 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	57114	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:31 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:31 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080631Z-r1755647c66gqcpzhw8q9nhnq000000009xg000000006egh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:31 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	57115	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:31 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ca6c0e2f-901e-008f-5413-2667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080631Z-17fbfdc98bbfmg5wrf1ctcuuun00000009rg000000000wpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	57116	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:31 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:31 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 4e972348-801e-00ac-276d-28fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080631Z-r1755647c66x7vzx9armv8e3cw0000000b100000000005g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:31 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	57117	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:32 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 481bd859-201e-00aa-219c-273928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080632Z-r1755647c66hlhp26bqv22ant400000009bg0000000054xw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	57118	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:32 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080632Z-17fbfdc98bbz4mxcabnudsmquw00000008a0000000001q6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	57119	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:32 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:32 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2ac474a9-a01e-0098-14a3-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080632Z-17fbfdc98bb9cv5m0pampz446s00000008p0000000003k7a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	57120	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:32 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:32 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e1e6f089-901e-005b-1e15-262005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080632Z-r1755647c666qwwlm3r555dyqc00000009gg000000001uy3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	57121	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:32 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 321a447c-801e-002a-4da3-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080632Z-17fbfdc98bbwj6cp6df5812g4s0000000ax0000000000ggy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	57122	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:33 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 6c7958f7-701e-001e-113a-29f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080633Z-17fbfdc98bblzxqcphe71tp4qw00000004qg000000001apg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	57123	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:33 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:33 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 0f0be25c-301e-006e-4493-28f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080633Z-17fbfdc98bbsw6nnfh43fuwvyn00000007dg0000000024rm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:33 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	57124	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:33 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:33 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080633Z-17fbfdc98bbtwz55a8v24wfkdw0000000acg000000003s7a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:33 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	57125	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:33 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 75e7650a-001e-0079-12c4-2612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080633Z-r1755647c66hxv26qums8q8fsw00000007bg0000000041wy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	57126	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:33 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ea5c4bf4-701e-000d-56e3-256de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080633Z-r1755647c66x7vzx9armv8e3cw0000000b100000000005kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	57127	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:34 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080634Z-r1755647c666sbmsukk894ba7n0000000710000000003eea x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	57128	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:34 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080634Z-17fbfdc98bbbnx4ldgze4de5zs00000007y0000000001dth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	57129	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:34 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:34 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080634Z-r1755647c66kcsqh9hy6eyp6kw00000007eg000000004kkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:34 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	57130	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:34 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: de1a9787-701e-006f-48ae-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080634Z-r1755647c66kcsqh9hy6eyp6kw00000007dg00000000537q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	57131	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:34 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:34 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080634Z-r1755647c66tgwsmrrc4e69sk000000008mg000000001db6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:34 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	57132	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:35 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:35 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1f235477-301e-003f-2c03-27266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080635Z-17fbfdc98bbsw6nnfh43fuwvyn00000007g000000000083z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:35 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	57133	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:35 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:35 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080635Z-r1755647c66qg7mpa8m0fzcvy00000000abg000000006p3k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:35 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	57134	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:35 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:35 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 170621ef-f01e-003f-351f-28d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080635Z-17fbfdc98bb8lw78ye6qppf97g00000009n0000000006wzs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:35 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	57135	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:35 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:35 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080635Z-r1755647c666s72wx0z5rz6s600000000acg00000000193p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:35 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	57136	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:35 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:35 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d72005e7-a01e-0002-1a61-285074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080635Z-r1755647c66p58nm9wqx75pnms00000008k0000000000cbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:35 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	57137	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:36 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:36 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080636Z-r1755647c66hbclz9tgqkaxg2w0000000au0000000003kmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:36 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	57138	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:36 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:36 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080636Z-r1755647c665dwkwce4e7gadz00000000a1g000000004s7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:36 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	57139	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:36 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:36 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080636Z-r1755647c66hxv26qums8q8fsw00000007cg000000002s7b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:36 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	57140	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:36 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:36 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 37a0b860-701e-0001-05e6-27b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080636Z-17fbfdc98bb2rxf2hfvcfz540000000007a0000000000acc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:36 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	57141	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:36 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:36 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080636Z-r1755647c66x7vzx9armv8e3cw0000000b0g000000000hng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:36 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	57142	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:36 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:37 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080637Z-r1755647c66vpf8fnbgmzm21hs0000000a9g000000000u82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:37 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	57144	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:37 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:37 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080637Z-r1755647c66t77qv3m6k1gb3zw000000090g000000000kdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:37 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	57143	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:37 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080637Z-r1755647c66hpt4fmfneq8rup800000006e0000000004cf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	57145	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:37 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080637Z-17fbfdc98bbl4n669ut4r27e08000000090g000000000gdv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	57147	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:37 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:37 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080637Z-r1755647c6688lj6g0wg0rqr1400000009dg0000000040h4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:38 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	57148	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:37 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:38 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9cbc9553-801e-008f-2aa3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080638Z-17fbfdc98bb9xxzfyggrfrbqmw00000008kg000000002d60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	57149	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:38 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080638Z-17fbfdc98bb2rxf2hfvcfz5400000000072g0000000058s0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	57150	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:38 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:38 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 17a5a9a5-201e-0003-7b36-28f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080638Z-17fbfdc98bb9xxzfyggrfrbqmw00000008f0000000005kar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:38 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	57146	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:38 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:38 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080638Z-r1755647c665dwkwce4e7gadz00000000a2g000000003tyf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:38 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	57151	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:38 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:38 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080638Z-r1755647c66x2fg5vpbex0bd840000000aqg000000002umd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:38 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	57152	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:38 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:38 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080638Z-r1755647c6688lj6g0wg0rqr1400000009eg000000003vh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	57153	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:38 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: c4804143-f01e-0003-2fe0-254453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080639Z-r1755647c66t77qv3m6k1gb3zw00000008yg000000002g76 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	57154	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:39 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:39 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 672cac94-f01e-00aa-27b2-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080639Z-r1755647c66xdwzbrg67s9avs400000009u0000000000pyg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	57155	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:39 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:39 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: bed29ea4-501e-00a0-2fb0-269d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080639Z-17fbfdc98bb8lw78ye6qppf97g00000009vg0000000006ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	57156	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:39 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: d859240f-301e-001f-2a4c-2baa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080639Z-17fbfdc98bbl4n669ut4r27e0800000008vg0000000042us x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	57157	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:39 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080639Z-r1755647c66f4bf880huw27dwc0000000an0000000003fhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	57158	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:39 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:39 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080639Z-r1755647c66w6f6b5182nn0u0400000007v0000000000bw6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:40 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	57159	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:39 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:39 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080639Z-17fbfdc98bbfmg5wrf1ctcuuun00000009hg000000005pfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:40 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	57160	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:40 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:40 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080640Z-r1755647c664nptf1txg2psens0000000850000000001xtq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:40 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	57161	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:40 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:40 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 04ace5c9-101e-007a-5c26-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080640Z-r1755647c66tsn7nz9wda692z000000007h00000000069rm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:40 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	57162	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:40 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:40 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c91d50fe-d01e-0049-5267-28e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080640Z-r1755647c66krc8kc5nnbqdves000000013000000000393q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:40 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	57163	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:40 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:40 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080640Z-r1755647c66tsn7nz9wda692z000000007m0000000004k4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:40 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	57164	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:40 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 19d379a2-b01e-0084-4b5b-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080640Z-17fbfdc98bbnvkgdqtwd2nmyz80000000890000000000ya6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	57165	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:41 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080641Z-17fbfdc98bbvvplhck7mbap4bw0000000av0000000005b3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	57166	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:41 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:41 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 43b0bec6-701e-0050-4289-286767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080641Z-17fbfdc98bbnvkgdqtwd2nmyz8000000086g0000000033hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 08:06:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	57167	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:41 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: cdbf2577-c01e-0034-7dc2-262af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080641Z-17fbfdc98bb2cvg4m0cmab3ecw00000007w000000000569s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	57168	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:41 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 5c4d015b-701e-0097-6b71-28b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080641Z-r1755647c666qwwlm3r555dyqc00000009g0000000002kx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	57169	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:41 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080641Z-17fbfdc98bbz4mxcabnudsmquw000000087g000000004r0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	57170	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:42 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080642Z-r1755647c66x7vzx9armv8e3cw0000000atg0000000084h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	57171	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:42 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080642Z-r1755647c66f4bf880huw27dwc0000000ahg000000005d50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	57172	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:42 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080642Z-17fbfdc98bbds27mnhu6ftg4d800000007mg0000000041vk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:42 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	57173	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:42 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0ad7b348-901e-0067-0d67-28b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080642Z-r1755647c665dwkwce4e7gadz00000000a40000000001y7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	57174	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:42 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080642Z-17fbfdc98bb6vp4m3kc0kte9cs0000000a30000000001v41 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	57175	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:43 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 35d0191b-501e-0047-5a17-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080643Z-17fbfdc98bbdbgkb6uyh3q4ue400000008kg000000004956 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	57176	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:43 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:43 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8055f236-801e-0083-4e87-28f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080643Z-r1755647c66ljccje5cnds62nc00000007zg0000000040q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:43 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	57177	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:43 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:43 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:43 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 78a5f633-501e-005b-51a6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080643Z-r1755647c66tgwsmrrc4e69sk000000008kg000000002agv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:43 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	57178	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:43 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:43 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 260950aa-801e-00a3-269d-277cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080643Z-17fbfdc98bblfj7gw4f18guu280000000ap0000000003z6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	57179	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:43 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:43 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:43 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080643Z-r1755647c66vkwr5neys93e0h400000008xg0000000001zg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:43 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	57180	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:44 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:44 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:44 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080644Z-17fbfdc98bbvvplhck7mbap4bw0000000ax0000000003b02 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:44 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	57181	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:44 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:44 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080644Z-17fbfdc98bblzxqcphe71tp4qw00000004pg00000000216z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:44 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	57182	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:44 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:44 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 30963bf2-701e-0001-2a98-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080644Z-17fbfdc98bblzxqcphe71tp4qw00000004pg000000002170 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:44 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	57183	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:44 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:44 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8e439449-301e-0051-2567-2838bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080644Z-17fbfdc98bbdbgkb6uyh3q4ue400000008hg00000000524v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:44 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	57184	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:44 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:44 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080644Z-17fbfdc98bbl4n669ut4r27e0800000008ug000000005hat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:44 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	57185	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:44 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:44 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080644Z-17fbfdc98bbbnx4ldgze4de5zs00000007s000000000632r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:45 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	57186	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:45 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 4fe07ac1-301e-0099-249c-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080645Z-r1755647c66x7vzx9armv8e3cw0000000aw0000000004s3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	57188	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:45 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:45 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080645Z-17fbfdc98bb5d4fn785en176rg00000009d000000000065h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:45 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	57187	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:45 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 08:06:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 08:06:45 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 44b69168-a01e-0098-3739-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T080645Z-r1755647c66vkwr5neys93e0h400000008w0000000001w01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 08:06:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	57189	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 08:06:45 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	04:05:23
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:05:24
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2204,i,6935731795475849158,12118422567334037329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:05:27
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE HTTP/1.1Host: clicks.eventbrite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: clicks.eventbrite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: clicks.eventbrite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 40

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2916, Parent PID: 2596

General

Chronological Activities

Analysis Process: chrome.exePID: 4900, Parent PID: 2916

General

Chronological Activities

Analysis Process: chrome.exePID: 6420, Parent PID: 2596

General

Chronological Activities

Disassembly

Windows Analysis Report
https://clicks.eventbrite.com/q/wPkcJ1aGBX0p2_okiRTbjA~~/AAQxAQA~/RgRpBJbPPVcDc3BjQgpnE9IRImcIDHAZUhNtYWdudXMua2plbGxAZXN2LnNlWAQAAAAE